--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"error","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"debug","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"error","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646037,"nanos":738663002},"http":{"id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8787c9ac-97d6-42a1-a83d-0e12d30d294f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:52786","PortSpecifier":{"PortValue":52786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06ab417c-cc3b-40c5-b804-8c611114eb60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:52786","PortSpecifier":{"PortValue":52786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646037,"nanos":774522038},"http":{"id":"06ab417c-cc3b-40c5-b804-8c611114eb60","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/auth-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ab417c-cc3b-40c5-b804-8c611114eb60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:52798","PortSpecifier":{"PortValue":52798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:52798","PortSpecifier":{"PortValue":52798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646037,"nanos":812062289},"http":{"id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","method":"GET","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hufef8hvSazD3W9z_ezRDVChIrVDlp9sCSpujwXUcjRUOaXJpCTuQVDswsM6"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hufef8hvSazD3W9z_ezRDVChIrVDlp9sCSpujwXUcjRUOaXJpCTuQVDswsM6\"}"} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-21T15:00:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8a60f4d-e582-4e5b-9fc1-c6b742bbd487","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:00:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"error","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"error","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"error","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:00:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:00:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d09b95b1-bfca-407b-99cd-1c8b07412519","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646054,"nanos":884952487},"http":{"id":"d09b95b1-bfca-407b-99cd-1c8b07412519","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09b95b1-bfca-407b-99cd-1c8b07412519","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:45440","PortSpecifier":{"PortValue":45440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ee21b85-b052-47d7-a5e2-28a167155349","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:45440","PortSpecifier":{"PortValue":45440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646054,"nanos":927521553},"http":{"id":"6ee21b85-b052-47d7-a5e2-28a167155349","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/auth-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ee21b85-b052-47d7-a5e2-28a167155349","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:51840","PortSpecifier":{"PortValue":51840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:51840","PortSpecifier":{"PortValue":51840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646054,"nanos":964959837},"http":{"id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:00:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b47c8c3-ba2f-41af-89e1-8a31fea40dcf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:45444","PortSpecifier":{"PortValue":45444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:45444","PortSpecifier":{"PortValue":45444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646054,"nanos":999721690},"http":{"id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/auth-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:00:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c51f1a3-1119-4baa-8ac4-a6b4885e172a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e3aa873-088f-4620-994a-7992d3452b55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44192","PortSpecifier":{"PortValue":44192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e3aa873-088f-4620-994a-7992d3452b55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e3aa873-088f-4620-994a-7992d3452b55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44192","PortSpecifier":{"PortValue":44192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646072,"nanos":64145920},"http":{"id":"9e3aa873-088f-4620-994a-7992d3452b55","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e3aa873-088f-4620-994a-7992d3452b55","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e3aa873-088f-4620-994a-7992d3452b55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3aa873-088f-4620-994a-7992d3452b55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e3aa873-088f-4620-994a-7992d3452b55","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e3aa873-088f-4620-994a-7992d3452b55","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44956","PortSpecifier":{"PortValue":44956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5eed768-fdfb-494e-89b4-db165b29cb62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44956","PortSpecifier":{"PortValue":44956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646072,"nanos":101138642},"http":{"id":"c5eed768-fdfb-494e-89b4-db165b29cb62","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/auth-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5eed768-fdfb-494e-89b4-db165b29cb62","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","method":"GET","path":"/maas-api/v1/api-keys/788d819a-d4dc-4bcf-9523-a10a9c34cbdf","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646072,"nanos":138579579},"http":{"id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","method":"GET","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/788d819a-d4dc-4bcf-9523-a10a9c34cbdf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/788d819a-d4dc-4bcf-9523-a10a9c34cbdf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/auth-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1726c1ef-8fab-45e6-b15c-db2ea48db2dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44208","PortSpecifier":{"PortValue":44208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7771ea48-ed2d-4d37-a14f-562369f65c67","method":"GET","path":"/maas-api/v1/api-keys/788d819a-d4dc-4bcf-9523-a10a9c34cbdf","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:44208","PortSpecifier":{"PortValue":44208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646072,"nanos":167136274},"http":{"id":"7771ea48-ed2d-4d37-a14f-562369f65c67","method":"GET","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/788d819a-d4dc-4bcf-9523-a10a9c34cbdf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/788d819a-d4dc-4bcf-9523-a10a9c34cbdf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7771ea48-ed2d-4d37-a14f-562369f65c67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"debug","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"debug","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"error","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"debug","ts":"2026-07-21T15:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a41c86df-5731-4214-93b6-af9719228674","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:39918","PortSpecifier":{"PortValue":39918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a41c86df-5731-4214-93b6-af9719228674","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a41c86df-5731-4214-93b6-af9719228674","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:39918","PortSpecifier":{"PortValue":39918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646089,"nanos":286514454},"http":{"id":"a41c86df-5731-4214-93b6-af9719228674","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a41c86df-5731-4214-93b6-af9719228674","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a41c86df-5731-4214-93b6-af9719228674","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a41c86df-5731-4214-93b6-af9719228674","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a41c86df-5731-4214-93b6-af9719228674","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a41c86df-5731-4214-93b6-af9719228674","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:56822","PortSpecifier":{"PortValue":56822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:56822","PortSpecifier":{"PortValue":56822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646089,"nanos":333025213},"http":{"id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/auth-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb4a0af-d76e-4c30-bd32-efb67c732fdb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:39926","PortSpecifier":{"PortValue":39926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:39926","PortSpecifier":{"PortValue":39926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646089,"nanos":369352679},"http":{"id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-i66v8KDCOkrIsfjE_wZAKrJahkiVRAB9TS6g0WLVJlL26zXBZZwZNmeBfGuz"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-i66v8KDCOkrIsfjE_wZAKrJahkiVRAB9TS6g0WLVJlL26zXBZZwZNmeBfGuz\"}"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ba37f72-e109-4593-8789-fb98ca424abb","keyName":"e2e-auth-iso-a-0c84fe","subscription":"e2e-auth-iso-829f17","tenant":"e2e-shared-a-d89949","userId":"3ba37f72-e109-4593-8789-fb98ca424abb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/auth-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-829f17"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:01:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddf694b1-17e7-43ed-929e-fb7504086ef4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c042aaa269dd8246c2668d982ae98de539a21ee2063ab391a5cc205dd20d111"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400212a3e0d05215fa465690c508a000a4807538a4e42932a11762c705849b85"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a48303551097902fdb21961960b7376e34d0e3dd9132017e352c09c1c6b0b0b4"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcfe70b80a21bdae7cbf0fa07de449a6582ff1cea19ce16c51dccf24228689c"} {"level":"info","ts":"2026-07-21T15:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be12329b087d69a4232a9abf1970cbfc36cc9a6213aade5d576313c51de8cee"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ed87e6c6bffb0f556b0484250c49f574e5060bfc5aba1c7440eb53c9c7fd37"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aade56733772c51311d41115f69708a5aa88ceeea7adf86cbe73eb83ed4bfe63"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b01aef999076e74885cf49b6fccb7c69d8e103779fb7587bb2d68671ae4bbb97"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb34d62f3bfd0fff0a4670f38b359e440ac4da13493f87d6bfa425ec82309968"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98fe427fdb55dc35d0840375bb6877c0518f43564dd5e9bacc179a3e44c92f8a"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ccdc42ba1cabc3e2f59bdedde3adc941c7c5bded29ce4824272ea7369c4dea5"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/006a1bb5ccfff468ab66ab37e6374361d215c867cc23df7cff5cb4173bb0b67e"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d0e94f83e6ef5af54128f2e2957ba5aa66feea812192f2535c71ae32fe99747"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d43eb8db935e8baf806d5287a109ccedff5b331e9d82e6660f9e72bbcfe1b0e5"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cb28095a2df5ea3fbbfc30be2056415fe05cbedd01ba678e7e4e5f5d3c876d3"} {"level":"info","ts":"2026-07-21T15:01:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01f1c58fab131aa77c742eaa6c8450606e1e5b50a02163e825a730b3a0af1199"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8"} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344"} {"level":"info","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:02:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:53408","PortSpecifier":{"PortValue":53408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:53408","PortSpecifier":{"PortValue":53408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646169,"nanos":273903553},"http":{"id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/sub-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46f94fd6-60dc-4a87-a789-6c28fd9f5d88","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:49436","PortSpecifier":{"PortValue":49436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:49436","PortSpecifier":{"PortValue":49436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646169,"nanos":323958189},"http":{"id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/sub-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b4f547-c6c3-4a34-ad85-d3884a88c02c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:53420","PortSpecifier":{"PortValue":53420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:53420","PortSpecifier":{"PortValue":53420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646169,"nanos":364079862},"http":{"id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","method":"GET","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y9NIyTQKo8x1MKV8_fmoAJDg1H09xpUuqYEa9mhmdgpS8QGi9QKbHHr7aNJe"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y9NIyTQKo8x1MKV8_fmoAJDg1H09xpUuqYEa9mhmdgpS8QGi9QKbHHr7aNJe\"}"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1b87c60-dd20-4ff3-b257-7658c1bdaa83","keyName":"e2e-sub-iso-0c38b0","subscription":"e2e-a-only-5743f8","tenant":"e2e-shared-a-d89949","userId":"c1b87c60-dd20-4ff3-b257-7658c1bdaa83","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/sub-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5743f8"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7acc71a4-3339-415d-b822-4ec8f5bf2485","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:49446","PortSpecifier":{"PortValue":49446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70655e4e-c65d-4309-9405-82b8f2d828e5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:49446","PortSpecifier":{"PortValue":49446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646169,"nanos":404058571},"http":{"id":"70655e4e-c65d-4309-9405-82b8f2d828e5","method":"GET","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15wwPF361lfOdzisF_apo36BQmsrvKrgI9yzcie0H6bwjpQXVp6MmHt8LsrXy"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15wwPF361lfOdzisF_apo36BQmsrvKrgI9yzcie0H6bwjpQXVp6MmHt8LsrXy\"}"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7342881f-ba87-463c-9573-907b4e59da56","keyName":"e2e-sub-iso-2b4b73","subscription":"e2e-b-only-5743f8","tenant":"e2e-shared-b-449411","userId":"7342881f-ba87-463c-9573-907b4e59da56","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/sub-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5743f8"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70655e4e-c65d-4309-9405-82b8f2d828e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41790","PortSpecifier":{"PortValue":41790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41790","PortSpecifier":{"PortValue":41790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646181,"nanos":553488065},"http":{"id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/sub-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cbb153e-85ac-487a-9fff-bb4b760fb75f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:38590","PortSpecifier":{"PortValue":38590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be5046e6-8606-4393-a3ef-29d0c33d520a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:38590","PortSpecifier":{"PortValue":38590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646181,"nanos":616135786},"http":{"id":"be5046e6-8606-4393-a3ef-29d0c33d520a","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/sub-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be5046e6-8606-4393-a3ef-29d0c33d520a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41794","PortSpecifier":{"PortValue":41794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41794","PortSpecifier":{"PortValue":41794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646181,"nanos":649198375},"http":{"id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aiPaHnTlDH8nD1Gr_uMpD95FGYR704ovOHqyNbXx1aV6caS3Y3EBGEKBt9yA"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aiPaHnTlDH8nD1Gr_uMpD95FGYR704ovOHqyNbXx1aV6caS3Y3EBGEKBt9yA\"}"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"443493c8-35ad-4e04-ae58-8d4fc174e76c","keyName":"e2e-sub-iso-774fdd","subscription":"e2e-shared-sub-032346","tenant":"e2e-shared-a-d89949","userId":"443493c8-35ad-4e04-ae58-8d4fc174e76c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/sub-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-032346"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"537a0dc6-7044-4064-aa42-f8776c5f67a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:38592","PortSpecifier":{"PortValue":38592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:38592","PortSpecifier":{"PortValue":38592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646181,"nanos":680616692},"http":{"id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BoDniW1dp1zd6fxD_yTPyGfNDsJ1CTh44ZF92ZmbvTOPp6TD0RTTl800kekg"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BoDniW1dp1zd6fxD_yTPyGfNDsJ1CTh44ZF92ZmbvTOPp6TD0RTTl800kekg\"}"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a5e3937-92b7-461c-a645-6650069c31b3","keyName":"e2e-sub-iso-069939","subscription":"e2e-shared-sub-032346","tenant":"e2e-shared-b-449411","userId":"4a5e3937-92b7-461c-a645-6650069c31b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/sub-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-032346"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0d8f754-cb23-46e9-8f15-82e7eecb9fc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d6b482c053e569c530486f605d59a6e43ac81a362b6d996bd6e22b5dbabaa5a"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c5fbe6d6f28f838d01decdc8ceda4aeb579d436ae002c2ec19b72afe1d5458"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f569e7057231af6c0dca59bf5947a3b77f034190e5a35be18d39f48d4f12e87d"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a08f85b5b5f9d457f9f8865ccccef31618623bac2ed62c80c12a103d2139c5fc"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/537bdfdff2b085d80d84446b383176b67df270420f0542e7856a5773d41f99f1"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ed971b928d109ac87bce29eb0aea27da68b3acd8f4e6187c5f2f2320f5f1d02"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d988ab1bb9d43e862bb41b34ec9d5c22027e731a024438857710a0d7f3f44c23"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3305fad4281b47b1cd8d573822a597879659abec3882fb81d2ea19a0359b344"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af596878fcee825ff7d59ca558bb5afaa6149505dd3c7cd02e8b514679177716"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1651bc87b27f0c2ac11cb0c769f7e90b33b74d01698bc9997de0342865f583b8"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e376e4aefdff6292e99872d4f1580f363ad3d6fd0647d90de1c752b26be79fe1"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c15ddf6d46e4ead6bef584fab90bd32a429ba75c6771b82a452dc7c86aed29d1"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7db3ae67a52a51c374186041e26b791d8a9d50573f4639b753820812c843c635"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e6d4c5527ff3b213b3b76293ea6ce286141515f6040029adb50ed25b0021e23"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6bb72b335eedc584844a53854a9eb61d432fea200015c4bb1967f2bf1c0eed4"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be7e12da397a49de00cd834c7aa2cb6c881e1c89f872e73e425587953d447383"} {"level":"info","ts":"2026-07-21T15:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"} {"level":"error","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:04:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T15:04:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:04:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646248,"nanos":984614935},"http":{"id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f3ceaf-3ead-43e4-bd41-d0fd51d0ea47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41388","PortSpecifier":{"PortValue":41388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be01ff05-0f38-42d4-afec-7ad975965cdb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41388","PortSpecifier":{"PortValue":41388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646249,"nanos":26298345},"http":{"id":"be01ff05-0f38-42d4-afec-7ad975965cdb","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be01ff05-0f38-42d4-afec-7ad975965cdb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33286","PortSpecifier":{"PortValue":33286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33286","PortSpecifier":{"PortValue":33286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646249,"nanos":67077202},"http":{"id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf1d5782-d779-4f74-8da4-86e7d17a1125","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33288","PortSpecifier":{"PortValue":33288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"415a35e8-5020-427d-a84d-6fb77396fb94","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33288","PortSpecifier":{"PortValue":33288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646250,"nanos":154623955},"http":{"id":"415a35e8-5020-427d-a84d-6fb77396fb94","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"415a35e8-5020-427d-a84d-6fb77396fb94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33292","PortSpecifier":{"PortValue":33292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33292","PortSpecifier":{"PortValue":33292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646251,"nanos":216897116},"http":{"id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57ff5156-0cc7-43d7-90fb-89a5052fce9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33298","PortSpecifier":{"PortValue":33298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646252,"nanos":254243950},"http":{"id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5fd02-806e-4ec4-9759-83bc92dfe884","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33314","PortSpecifier":{"PortValue":33314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33314","PortSpecifier":{"PortValue":33314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646253,"nanos":292735454},"http":{"id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b6475ee-2403-4476-b002-c2baa1a7cc1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33318","PortSpecifier":{"PortValue":33318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33318","PortSpecifier":{"PortValue":33318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646254,"nanos":332932668},"http":{"id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e17197-db61-4b4d-87d1-4a2e8e363c00","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82825676-0943-4f65-9176-26556585687c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82825676-0943-4f65-9176-26556585687c","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82825676-0943-4f65-9176-26556585687c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646255,"nanos":367932173},"http":{"id":"82825676-0943-4f65-9176-26556585687c","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82825676-0943-4f65-9176-26556585687c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14CKRYMIMhUY1efxd_mCocZ4bA9Gy5K8cOG1LRlW7Hg4Jd7YePakWJQqjzLWw\"}"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","subscription":"e2e-rate-iso-a-f91308","tenant":"e2e-shared-a-d89949","userId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82825676-0943-4f65-9176-26556585687c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-f91308\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82825676-0943-4f65-9176-26556585687c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f91308"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82825676-0943-4f65-9176-26556585687c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d92a5160-4fcb-4517-839f-7ae2c954b8e1","keyName":"e2e-rate-a-f91308","selected_subscription":"e2e-rate-iso-a-f91308","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-f91308@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f91308","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82825676-0943-4f65-9176-26556585687c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82825676-0943-4f65-9176-26556585687c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41180","PortSpecifier":{"PortValue":41180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41180","PortSpecifier":{"PortValue":41180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646264,"nanos":205119827},"http":{"id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf6f007b-25e0-4212-b9a7-e19e38da7bb2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36314","PortSpecifier":{"PortValue":36314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36314","PortSpecifier":{"PortValue":36314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646264,"nanos":244120635},"http":{"id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"]}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b134e4345058"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7af604fc-7b2e-45ec-8b37-153407cee3e1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2d9ca55-59ec-4157-8c63-dd5a472105b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ad854b-e5f0-4af0-980d-59f75a76f9a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e7851c-81ee-4534-b449-bb17b732889a","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646264,"nanos":278431826},"http":{"id":"e9e7851c-81ee-4534-b449-bb17b732889a","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg\"}"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","subscription":"e2e-rate-iso-a-b4fce2","tenant":"e2e-shared-a-d89949","userId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4fce2"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","selected_subscription":"e2e-rate-iso-a-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-b4fce2@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e7851c-81ee-4534-b449-bb17b732889a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41196","PortSpecifier":{"PortValue":41196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41196","PortSpecifier":{"PortValue":41196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646265,"nanos":315489324},"http":{"id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg\"}"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","subscription":"e2e-rate-iso-a-b4fce2","tenant":"e2e-shared-a-d89949","userId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4fce2"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","selected_subscription":"e2e-rate-iso-a-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-b4fce2@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f589915-b0e9-4420-b3a5-37ea593c1af1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","method":"POST","path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions","host":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646266,"nanos":347759840},"http":{"id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","method":"POST","headers":{":authority":"e2e-shared-a-d89949.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WSgse4OtlqvoaX8K_O4lojMYDw5153GkK5BkOrhLFjHcTC8l5MX8cqqST2lg\"}"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","subscription":"e2e-rate-iso-a-b4fce2","tenant":"e2e-shared-a-d89949","userId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\",\"requestedSubscription\":\"e2e-rate-iso-a-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d89949.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d89949/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4fce2"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb2e6f73-9e8a-4633-8001-a6493e3f08e4","keyName":"e2e-rate-a-b4fce2","selected_subscription":"e2e-rate-iso-a-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-a-d89949/e2e-rate-iso-a-b4fce2@ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d89949","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4fce2","namespace":"ai-tenant-e2e-shared-a-d89949","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d89949/rate-test-model-d89949"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4987bbb-12a3-4e88-84b9-f6d8ae755be1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36330","PortSpecifier":{"PortValue":36330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","method":"POST","path":"/ai-tenant-e2e-shared-b-449411/rate-test-model-449411/v1/completions","host":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.19:36330","PortSpecifier":{"PortValue":36330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784646266,"nanos":381713047},"http":{"id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","method":"POST","headers":{":authority":"e2e-shared-b-449411.apps.9e0a5b14-4aa3-435a-b826-b134e4345058.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-449411/rate-test-model-449411/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XlWMpQWvT8KZkRxl_q3fAhWXapLALJKH2LcYLiq6ajQi82KV0QTFxHxYtL3D"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XlWMpQWvT8KZkRxl_q3fAhWXapLALJKH2LcYLiq6ajQi82KV0QTFxHxYtL3D\"}"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5cc006a3-86ca-46c6-b543-3f2b6920cacb","keyName":"e2e-rate-b-b4fce2","subscription":"e2e-rate-iso-b-b4fce2","tenant":"e2e-shared-b-449411","userId":"5cc006a3-86ca-46c6-b543-3f2b6920cacb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\",\"requestedSubscription\":\"e2e-rate-iso-b-b4fce2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-449411.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-449411","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b4fce2","namespace":"ai-tenant-e2e-shared-b-449411","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-449411/rate-test-model-449411"}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-449411/rate-test-model-449411\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-449411/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b4fce2"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5cc006a3-86ca-46c6-b543-3f2b6920cacb","keyName":"e2e-rate-b-b4fce2","selected_subscription":"e2e-rate-iso-b-b4fce2","selected_subscription_key":"ai-tenant-e2e-shared-b-449411/e2e-rate-iso-b-b4fce2@ai-tenant-e2e-shared-b-449411/rate-test-model-449411","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-449411","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b4fce2","namespace":"ai-tenant-e2e-shared-b-449411","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-449411/rate-test-model-449411"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T15:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c2fd490-02ed-4e08-9311-2bcb5213af1c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74407ca326082af406ae2c6bf77e9cd78d4f5cbcc51699414006717ef2d7f5b2"} {"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e74aee2c29521eda7777fa68792cc10e2d53e5a433e5826c9e5b6c45a83a67bf"} {"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c30e1126fd856d17c77d47dde93e4ed56a70bc6ce2bb78f41bb4539faed44a3c"} {"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55d54ccd0fc5aa56a07b5fcdaa7bdc6db4bca02ba11fc66fd45b4694ed1b5643"} {"level":"info","ts":"2026-07-21T15:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc3d73d50d12a72f249c4ad20d007df01dfed7da91d5e3e8cfce03a9026ca8d"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd08bff290c020f31e911b9c5e089cb0106b231424c49c17dc3df69f92d3c732"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e06233f799a5bf76aa072951af793241cef4cffed7ecb3a60fb3603496b4690"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/291cdefff56e2e7275f5e6bb18fc2cc5217cd71413dbe836850faf8494055dda"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/791fddc7d286bf5e638bf52587f21b6eaa7afdac1f8a7a1bf8817a9958d7ab5c"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d57a94e98aa718ef81006db7060d32ba5b2e7ddc3e43d46e125bd06337b9bcab"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c33cf16bb1f9e6f4ccec27c96eae8abbd181f2ea2c2c4d42e492f84f91ede1a"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faeef0576054faf0a9a6e065f53a8fd1af11cdcf1112ed8b3fff75f925120304"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b3c6da4cd0bda2ff6a5d2ecbcc1f820b9839c174155ab9316c7259c7075fee"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/930dda092ec972ba00dcd9dd25c1e716ad44882ce1cdb984cea81e99a87ef3f3"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3de6167697376c88a79f1dbbf7a10453949233547616fdeb208cdac64b6b966"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a1c68897b8acb3f7f295492735b9192fff4c888aa95adf36077c3616febd8c"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffca50aace0ce9284e12cddf6e9dc5b360a6833a0469909dbfd2b9c40c309a52"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af5d42f78287939fee2cf57a49bcb0dea737e5d95d3ae7750945232d1e712d9b"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbf78e061576b4aeba9613c97192ba36021c3a955a9acc951d2885b32ca3aed8"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/473de3ca9152bf837c36794c2af97365e237ba9bbedb042eab7100135325e5d7"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11486df6d37ec01b863311cc8b64d6f461af3ca88cb8fbfb7f1c403a1a3546b7"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa54169ce6a6fd189ca79bc4b99ce3843982f27aede4d5699a07b30e1f4a8d08"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ad856f7f27404743e2aeb10b289cf50d1b78bd0c7a815ec6456729499db29f"} {"level":"info","ts":"2026-07-21T15:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6524bad0248daac2e439758cc21f63056ce0fda53f77b8026a329ba1c7a29e5f"}