--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e36545f9-4395-4535-861b-712452b1da49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59486","PortSpecifier":{"PortValue":59486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e36545f9-4395-4535-861b-712452b1da49","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e36545f9-4395-4535-861b-712452b1da49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59486","PortSpecifier":{"PortValue":59486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824292,"nanos":416105838},"http":{"id":"e36545f9-4395-4535-861b-712452b1da49","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e36545f9-4395-4535-861b-712452b1da49","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e36545f9-4395-4535-861b-712452b1da49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e36545f9-4395-4535-861b-712452b1da49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e36545f9-4395-4535-861b-712452b1da49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e36545f9-4395-4535-861b-712452b1da49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40444","PortSpecifier":{"PortValue":40444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4408d2ff-ada1-469c-bce9-ba30430500ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40444","PortSpecifier":{"PortValue":40444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824292,"nanos":456187496},"http":{"id":"4408d2ff-ada1-469c-bce9-ba30430500ef","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4408d2ff-ada1-469c-bce9-ba30430500ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59488","PortSpecifier":{"PortValue":59488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59488","PortSpecifier":{"PortValue":59488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824292,"nanos":499579508},"http":{"id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","method":"GET","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VSOG728wDObPfv59_QBgvWhLZJwwZRe3oBDKeEYY39GoyuQ1tkdOHg1aTvfe"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VSOG728wDObPfv59_QBgvWhLZJwwZRe3oBDKeEYY39GoyuQ1tkdOHg1aTvfe\"}"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39d93bcb-aa59-405e-a076-9eb975c561f8","keyName":"e2e-auth-iso-a-924ec2","subscription":"e2e-auth-iso-ad2827","tenant":"e2e-shared-a-759481","userId":"39d93bcb-aa59-405e-a076-9eb975c561f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ad2827"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:31:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5952c0-4cf3-443b-b1dd-2a43353d2cc3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:31:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:31:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51088","PortSpecifier":{"PortValue":51088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51088","PortSpecifier":{"PortValue":51088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824309,"nanos":906330248},"http":{"id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1897ed1-f0c7-4f44-a2b3-2ce8a36ba120","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45312","PortSpecifier":{"PortValue":45312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45312","PortSpecifier":{"PortValue":45312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824309,"nanos":943081335},"http":{"id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"382c6455-90d5-43ae-ade0-0cbb3f1be35e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45324","PortSpecifier":{"PortValue":45324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:31:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45324","PortSpecifier":{"PortValue":45324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824309,"nanos":998777534},"http":{"id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","method":"GET","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SNbSsA798z0uRHZv_hB54LAmuBmiuzDWPzeBZnmkfgCYYBkqXvlnKxMyW8ut"} {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SNbSsA798z0uRHZv_hB54LAmuBmiuzDWPzeBZnmkfgCYYBkqXvlnKxMyW8ut\"}"} {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-23T16:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba0fdc18-81e1-4d5e-b29e-9d735220eec7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-23T16:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"error","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"error","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34176","PortSpecifier":{"PortValue":34176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34176","PortSpecifier":{"PortValue":34176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824329,"nanos":468138043},"http":{"id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba63c44b-9ef2-413c-bb99-f6fcb956f9b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43650","PortSpecifier":{"PortValue":43650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43650","PortSpecifier":{"PortValue":43650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824329,"nanos":506440845},"http":{"id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba2ee08f-94f0-4b7c-8b04-b68c189803f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34180","PortSpecifier":{"PortValue":34180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34180","PortSpecifier":{"PortValue":34180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824329,"nanos":548312414},"http":{"id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25f7ead-8a67-429c-a6b6-a07c125c89d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43656","PortSpecifier":{"PortValue":43656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43656","PortSpecifier":{"PortValue":43656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824329,"nanos":589834418},"http":{"id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682e58fb-3ae9-4c67-8d95-93c8da09b5e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"error","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"error","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57500","PortSpecifier":{"PortValue":57500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57500","PortSpecifier":{"PortValue":57500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824349,"nanos":119732999},"http":{"id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d451d50-c39f-4b56-82a3-a7d97f08b290","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0783daec-2157-481a-91f9-acc142258f94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0783daec-2157-481a-91f9-acc142258f94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0783daec-2157-481a-91f9-acc142258f94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57968","PortSpecifier":{"PortValue":57968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824349,"nanos":163481524},"http":{"id":"0783daec-2157-481a-91f9-acc142258f94","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0783daec-2157-481a-91f9-acc142258f94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0783daec-2157-481a-91f9-acc142258f94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0783daec-2157-481a-91f9-acc142258f94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0783daec-2157-481a-91f9-acc142258f94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0783daec-2157-481a-91f9-acc142258f94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57970","PortSpecifier":{"PortValue":57970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f00dd091-ff91-4d31-a635-86076fe9ade1","method":"GET","path":"/maas-api/v1/api-keys/3559198a-c8b0-4554-aaf1-aeb62b5716c7","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57970","PortSpecifier":{"PortValue":57970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824349,"nanos":204637708},"http":{"id":"f00dd091-ff91-4d31-a635-86076fe9ade1","method":"GET","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3559198a-c8b0-4554-aaf1-aeb62b5716c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3559198a-c8b0-4554-aaf1-aeb62b5716c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00dd091-ff91-4d31-a635-86076fe9ade1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57508","PortSpecifier":{"PortValue":57508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9aff1d2-560f-4f73-868e-59df36692a99","method":"GET","path":"/maas-api/v1/api-keys/3559198a-c8b0-4554-aaf1-aeb62b5716c7","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57508","PortSpecifier":{"PortValue":57508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824349,"nanos":240984566},"http":{"id":"c9aff1d2-560f-4f73-868e-59df36692a99","method":"GET","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3559198a-c8b0-4554-aaf1-aeb62b5716c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3559198a-c8b0-4554-aaf1-aeb62b5716c7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9aff1d2-560f-4f73-868e-59df36692a99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"debug","ts":"2026-07-23T16:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:32:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:32:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb83e01-82b9-4026-b661-898d972be418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52004","PortSpecifier":{"PortValue":52004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fb83e01-82b9-4026-b661-898d972be418","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fb83e01-82b9-4026-b661-898d972be418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52004","PortSpecifier":{"PortValue":52004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824368,"nanos":721003667},"http":{"id":"8fb83e01-82b9-4026-b661-898d972be418","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fb83e01-82b9-4026-b661-898d972be418","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fb83e01-82b9-4026-b661-898d972be418","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fb83e01-82b9-4026-b661-898d972be418","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb83e01-82b9-4026-b661-898d972be418","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fb83e01-82b9-4026-b661-898d972be418","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824368,"nanos":760918980},"http":{"id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/auth-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f65462b-f2ff-4a99-bcf7-6ecde94cd5cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52010","PortSpecifier":{"PortValue":52010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52010","PortSpecifier":{"PortValue":52010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824368,"nanos":801235033},"http":{"id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FZviojdlhj4I1KZ9_ByxSX0TlA7nCpqwi2XpWgW7CdSYZg6DLKqmIotawIEJ"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FZviojdlhj4I1KZ9_ByxSX0TlA7nCpqwi2XpWgW7CdSYZg6DLKqmIotawIEJ\"}"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0f94a03c-8bd1-4198-984f-3c5d65a8831c","keyName":"e2e-auth-iso-a-58503b","subscription":"e2e-auth-iso-14f455","tenant":"e2e-shared-a-759481","userId":"0f94a03c-8bd1-4198-984f-3c5d65a8831c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/auth-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-14f455"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:32:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d9e2586-c30a-452f-aa72-2c4c4f2f92a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b39aa0bbcf57879ec0fe7b1a1003a5c2ae7b7865b80cd890bbf7964f5087d8a"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fa9672f48b701487daf65472e208aa874bd528d06326c0ef7e7e86f77fc53f5"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e419b1ce6e4bce154163d91c053d100af09c15c8a93f05f3a9337eec26c65f"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57554763a19a05c5fb90945ce59ac451dcbd4b80540e3fdf375e9d996d4b432d"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0729ae243e27f5ffb01473526606e1610b90a3cea412d2d15ec3746665b08e6d"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44ac91d8daf26c433e9dc0ca099b6134a9a6ef2dc8d087b8483c898a55772e67"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4089770921e81f1e8c3ec7a53e9fd81dbedf6c2b37d1c2c8f5be458e091fc75"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa3d5a4c8626a7ecabc298e2245b6a2c915802de9b8c11cf3616c3f55e49b17"} {"level":"info","ts":"2026-07-23T16:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e0c2f1345bfd1619cbed1e9b5c36836d16236012e62a3e4839c5b0bbf090ea"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624c0ee42fdfc39864609a74f4987c04ebf502afefb51a8a3304fc3cbe4d4c00"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86e9b6c7428529f6472765f5aee81df0a9eec1ef6f82b362d647a0e54d1cade0"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3755d906006b562684adedd2fd785adda7a815bde70494e56eb370e7a2ccc8a"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04cb8c5c796a2da23a5df4ab7c327e4d59f10f4561f085119db5249d7cda2232"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc9fb8617ced8cc5cb3ba67d20a14cb0123ae5637c4a4056058c2d6a9c947b"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f76b2a905486527487e41a5225d9b94673af4eac9f6bc964ee958a7ecc247b"} {"level":"info","ts":"2026-07-23T16:32:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad0180f63bdc26adbd1e302db5ae0fb446d92e1a2b76ffdef9c217dc180f6d27"} {"level":"debug","ts":"2026-07-23T16:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"error","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"} {"level":"error","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786"} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f"} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525"} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48554","PortSpecifier":{"PortValue":48554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48554","PortSpecifier":{"PortValue":48554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824429,"nanos":446332556},"http":{"id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/sub-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6305c368-2c84-4a3a-83c6-e7f68d2a8117","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54120","PortSpecifier":{"PortValue":54120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54120","PortSpecifier":{"PortValue":54120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824429,"nanos":489461662},"http":{"id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/sub-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66f88d42-9d2a-4b25-9f47-19c64dd62cfc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48570","PortSpecifier":{"PortValue":48570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70a21de2-1b5d-4513-927c-6ed0021f4804","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48570","PortSpecifier":{"PortValue":48570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824429,"nanos":530593349},"http":{"id":"70a21de2-1b5d-4513-927c-6ed0021f4804","method":"GET","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SgpYu6X3hwxGertF_ZbyAKe63EaVTLNEBShJWSgMEqN0jdHzg9VsrN7J5YZ2"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SgpYu6X3hwxGertF_ZbyAKe63EaVTLNEBShJWSgMEqN0jdHzg9VsrN7J5YZ2\"}"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41c1d43c-9b7c-42ba-a49a-c1faadd8333e","keyName":"e2e-sub-iso-a8315e","subscription":"e2e-a-only-a7c87a","tenant":"e2e-shared-a-759481","userId":"41c1d43c-9b7c-42ba-a49a-c1faadd8333e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/sub-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a7c87a"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70a21de2-1b5d-4513-927c-6ed0021f4804","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54126","PortSpecifier":{"PortValue":54126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ecea343-a998-417a-b9df-761e6b9016b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54126","PortSpecifier":{"PortValue":54126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824429,"nanos":573373949},"http":{"id":"0ecea343-a998-417a-b9df-761e6b9016b0","method":"GET","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x4dgBLGZRBenEOnR_2CmVz1MejTcrAVIQs9nKWFZ8z3pRwrKY0DlMuRl7ck4"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x4dgBLGZRBenEOnR_2CmVz1MejTcrAVIQs9nKWFZ8z3pRwrKY0DlMuRl7ck4\"}"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d8694ba-439b-4c2e-9f9f-6f0caee2f244","keyName":"e2e-sub-iso-911a96","subscription":"e2e-b-only-a7c87a","tenant":"e2e-shared-b-3a6a71","userId":"0d8694ba-439b-4c2e-9f9f-6f0caee2f244","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/sub-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a7c87a"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ecea343-a998-417a-b9df-761e6b9016b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47764","PortSpecifier":{"PortValue":47764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47764","PortSpecifier":{"PortValue":47764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824444,"nanos":213562389},"http":{"id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/sub-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c6f3d5c-9e8f-4ff5-9a14-cc9ff572ea95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"489b9027-6248-468f-8fff-9998bd732c43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54012","PortSpecifier":{"PortValue":54012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"489b9027-6248-468f-8fff-9998bd732c43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"489b9027-6248-468f-8fff-9998bd732c43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54012","PortSpecifier":{"PortValue":54012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824444,"nanos":254728066},"http":{"id":"489b9027-6248-468f-8fff-9998bd732c43","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"489b9027-6248-468f-8fff-9998bd732c43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"489b9027-6248-468f-8fff-9998bd732c43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/sub-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"489b9027-6248-468f-8fff-9998bd732c43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"489b9027-6248-468f-8fff-9998bd732c43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"489b9027-6248-468f-8fff-9998bd732c43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c68249b1-53bc-4716-bdec-b98330044845","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47772","PortSpecifier":{"PortValue":47772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c68249b1-53bc-4716-bdec-b98330044845","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c68249b1-53bc-4716-bdec-b98330044845","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47772","PortSpecifier":{"PortValue":47772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824444,"nanos":290478218},"http":{"id":"c68249b1-53bc-4716-bdec-b98330044845","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cLenPVngU6jqRtSU_qdoB3SPBpHAnzOTmXfCxfZ5kylK4xoUR8LcSoYbMwV9"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cLenPVngU6jqRtSU_qdoB3SPBpHAnzOTmXfCxfZ5kylK4xoUR8LcSoYbMwV9\"}"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b369a326-aeb2-41a3-b875-864a1363d480","keyName":"e2e-sub-iso-a58b7b","subscription":"e2e-shared-sub-753a65","tenant":"e2e-shared-a-759481","userId":"b369a326-aeb2-41a3-b875-864a1363d480","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c68249b1-53bc-4716-bdec-b98330044845","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/sub-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68249b1-53bc-4716-bdec-b98330044845","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-753a65"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c68249b1-53bc-4716-bdec-b98330044845","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c68249b1-53bc-4716-bdec-b98330044845","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54028","PortSpecifier":{"PortValue":54028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54028","PortSpecifier":{"PortValue":54028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824444,"nanos":324611810},"http":{"id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Yyq7GkT7bdbXRdYB_wrjSzjJdnYAehasyivQm2gQSYa6zPBFRbIgF8myRK7s"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Yyq7GkT7bdbXRdYB_wrjSzjJdnYAehasyivQm2gQSYa6zPBFRbIgF8myRK7s\"}"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12190a26-ca38-4612-a04e-844f7fcef893","keyName":"e2e-sub-iso-2afdcb","subscription":"e2e-shared-sub-753a65","tenant":"e2e-shared-b-3a6a71","userId":"12190a26-ca38-4612-a04e-844f7fcef893","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/sub-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-753a65"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5d5d5f6-dbe5-4f7c-bd4b-2b10983852b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/947eea4d8ae310e19042866b5651ff30e52ecfe81951202c2f0b5c91552a58c0"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230"} {"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"} {"level":"info","ts":"2026-07-23T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4"} {"level":"info","ts":"2026-07-23T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"error","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"} {"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"error","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"error","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42542","PortSpecifier":{"PortValue":42542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cfab210-34f4-442b-a870-91387bff2f7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42542","PortSpecifier":{"PortValue":42542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824515,"nanos":207909379},"http":{"id":"9cfab210-34f4-442b-a870-91387bff2f7d","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35894","PortSpecifier":{"PortValue":35894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35894","PortSpecifier":{"PortValue":35894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824515,"nanos":261322100},"http":{"id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42546","PortSpecifier":{"PortValue":42546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"055dea52-3938-44ba-aa35-4b10fd0619a3","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42546","PortSpecifier":{"PortValue":42546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824515,"nanos":317051384},"http":{"id":"055dea52-3938-44ba-aa35-4b10fd0619a3","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb\"}"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","subscription":"e2e-rate-iso-a-eb31f4","tenant":"e2e-shared-a-759481","userId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-eb31f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb31f4"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","selected_subscription":"e2e-rate-iso-a-eb31f4","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-eb31f4@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42556","PortSpecifier":{"PortValue":42556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42556","PortSpecifier":{"PortValue":42556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824516,"nanos":405786825},"http":{"id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb\"}"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","subscription":"e2e-rate-iso-a-eb31f4","tenant":"e2e-shared-a-759481","userId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-eb31f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb31f4"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","selected_subscription":"e2e-rate-iso-a-eb31f4","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-eb31f4@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42560","PortSpecifier":{"PortValue":42560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87b3bea3-9667-4165-9292-b6534c30bad2","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42560","PortSpecifier":{"PortValue":42560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824517,"nanos":447736302},"http":{"id":"87b3bea3-9667-4165-9292-b6534c30bad2","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb\"}"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","subscription":"e2e-rate-iso-a-eb31f4","tenant":"e2e-shared-a-759481","userId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-eb31f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb31f4"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","selected_subscription":"e2e-rate-iso-a-eb31f4","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-eb31f4@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824528,"nanos":411730726},"http":{"id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54602","PortSpecifier":{"PortValue":54602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27a2e6ec-4713-4a91-8304-65e08079c905","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54602","PortSpecifier":{"PortValue":54602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824528,"nanos":451055931},"http":{"id":"27a2e6ec-4713-4a91-8304-65e08079c905","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824528,"nanos":496908290},"http":{"id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO\"}"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","subscription":"e2e-rate-iso-a-a06b5d","tenant":"e2e-shared-a-759481","userId":"414f8b6a-6d23-45df-b91c-5a606dea09da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a06b5d"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","selected_subscription":"e2e-rate-iso-a-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-a06b5d@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50958","PortSpecifier":{"PortValue":50958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e5bd596-70dd-430b-9b91-dd8c69971662","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50958","PortSpecifier":{"PortValue":50958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824529,"nanos":544897443},"http":{"id":"5e5bd596-70dd-430b-9b91-dd8c69971662","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO\"}"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","subscription":"e2e-rate-iso-a-a06b5d","tenant":"e2e-shared-a-759481","userId":"414f8b6a-6d23-45df-b91c-5a606dea09da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a06b5d"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","selected_subscription":"e2e-rate-iso-a-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-a06b5d@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50970","PortSpecifier":{"PortValue":50970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50970","PortSpecifier":{"PortValue":50970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824530,"nanos":586633295},"http":{"id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO\"}"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","subscription":"e2e-rate-iso-a-a06b5d","tenant":"e2e-shared-a-759481","userId":"414f8b6a-6d23-45df-b91c-5a606dea09da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a06b5d"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","selected_subscription":"e2e-rate-iso-a-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-a06b5d@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","method":"POST","path":"/ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71/v1/completions","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824530,"nanos":625973390},"http":{"id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KbViC28cgAbPfMxw_mzNCeDFoBbXtBFUYuugD7Vi4R6WIm50ol1KHxqAOA7J"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KbViC28cgAbPfMxw_mzNCeDFoBbXtBFUYuugD7Vi4R6WIm50ol1KHxqAOA7J\"}"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"324b3ca3-8022-4650-82ec-d1e692571399","keyName":"e2e-rate-b-a06b5d","subscription":"e2e-rate-iso-b-a06b5d","tenant":"e2e-shared-b-3a6a71","userId":"324b3ca3-8022-4650-82ec-d1e692571399","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\",\"requestedSubscription\":\"e2e-rate-iso-b-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3a6a71","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a06b5d","namespace":"ai-tenant-e2e-shared-b-3a6a71","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71"}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a06b5d"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"324b3ca3-8022-4650-82ec-d1e692571399","keyName":"e2e-rate-b-a06b5d","selected_subscription":"e2e-rate-iso-b-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-b-3a6a71/e2e-rate-iso-b-a06b5d@ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3a6a71","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a06b5d","namespace":"ai-tenant-e2e-shared-b-3a6a71","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T16:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"} {"level":"info","ts":"2026-07-23T16:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"} {"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"}