--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39198","PortSpecifier":{"PortValue":39198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39198","PortSpecifier":{"PortValue":39198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565155,"nanos":473441796},"http":{"id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/auth-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52bb9778-ba84-4e8e-9036-9e0b6aebdf34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b19194f-87bd-4165-9f27-194a657944f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41500","PortSpecifier":{"PortValue":41500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b19194f-87bd-4165-9f27-194a657944f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b19194f-87bd-4165-9f27-194a657944f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41500","PortSpecifier":{"PortValue":41500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565155,"nanos":509131509},"http":{"id":"2b19194f-87bd-4165-9f27-194a657944f2","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b19194f-87bd-4165-9f27-194a657944f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b19194f-87bd-4165-9f27-194a657944f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/auth-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b19194f-87bd-4165-9f27-194a657944f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b19194f-87bd-4165-9f27-194a657944f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b19194f-87bd-4165-9f27-194a657944f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39202","PortSpecifier":{"PortValue":39202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39202","PortSpecifier":{"PortValue":39202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565155,"nanos":539133094},"http":{"id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/auth-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ac7f9e-30fd-9ae3-b135-7b0bcdf0bb50","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"add74881-b010-4441-b146-b9974afc1557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"add74881-b010-4441-b146-b9974afc1557","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"add74881-b010-4441-b146-b9974afc1557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565155,"nanos":573994808},"http":{"id":"add74881-b010-4441-b146-b9974afc1557","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"add74881-b010-4441-b146-b9974afc1557","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"add74881-b010-4441-b146-b9974afc1557","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/auth-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"add74881-b010-4441-b146-b9974afc1557","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"add74881-b010-4441-b146-b9974afc1557","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"add74881-b010-4441-b146-b9974afc1557","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"error","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:32:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:32:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cde17462-ad5f-4c29-a749-68347993c389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41444","PortSpecifier":{"PortValue":41444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cde17462-ad5f-4c29-a749-68347993c389","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cde17462-ad5f-4c29-a749-68347993c389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41444","PortSpecifier":{"PortValue":41444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565174,"nanos":789412412},"http":{"id":"cde17462-ad5f-4c29-a749-68347993c389","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cde17462-ad5f-4c29-a749-68347993c389","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cde17462-ad5f-4c29-a749-68347993c389","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/auth-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cde17462-ad5f-4c29-a749-68347993c389","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cde17462-ad5f-4c29-a749-68347993c389","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cde17462-ad5f-4c29-a749-68347993c389","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56094","PortSpecifier":{"PortValue":56094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6150b6a2-9c62-44a7-b885-b40d43100642","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56094","PortSpecifier":{"PortValue":56094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565174,"nanos":819515701},"http":{"id":"6150b6a2-9c62-44a7-b885-b40d43100642","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/auth-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6150b6a2-9c62-44a7-b885-b40d43100642","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56100","PortSpecifier":{"PortValue":56100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","method":"GET","path":"/maas-api/v1/api-keys/b9c668ea-56bb-462e-9925-55136f551af1","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56100","PortSpecifier":{"PortValue":56100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565174,"nanos":855833021},"http":{"id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","method":"GET","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9c668ea-56bb-462e-9925-55136f551af1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9c668ea-56bb-462e-9925-55136f551af1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/auth-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c3e4d76-2283-45cb-a60a-685bb746dac9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f3b3cec-0d55-4384-b378-e966687d1d10","method":"GET","path":"/maas-api/v1/api-keys/b9c668ea-56bb-462e-9925-55136f551af1","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41456","PortSpecifier":{"PortValue":41456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565174,"nanos":886461320},"http":{"id":"2f3b3cec-0d55-4384-b378-e966687d1d10","method":"GET","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9c668ea-56bb-462e-9925-55136f551af1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9c668ea-56bb-462e-9925-55136f551af1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/auth-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:32:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3b3cec-0d55-4384-b378-e966687d1d10","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"error","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"error","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:33:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"debug","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:33:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60686","PortSpecifier":{"PortValue":60686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60686","PortSpecifier":{"PortValue":60686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565194,"nanos":93317639},"http":{"id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/auth-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dda2d9-73db-4b03-9e14-a3de790bb67e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32978","PortSpecifier":{"PortValue":32978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"897c30ec-bb46-4540-b310-eed8323e7a6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32978","PortSpecifier":{"PortValue":32978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565194,"nanos":129243500},"http":{"id":"897c30ec-bb46-4540-b310-eed8323e7a6d","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/auth-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"897c30ec-bb46-4540-b310-eed8323e7a6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60698","PortSpecifier":{"PortValue":60698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efd9050a-a58e-4ad4-8c42-88298f286d21","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60698","PortSpecifier":{"PortValue":60698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565194,"nanos":166349946},"http":{"id":"efd9050a-a58e-4ad4-8c42-88298f286d21","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EaSJKBc32nzTN2a_LRFFIDd2kwLdD0oJrd43cygyElHq01H6QzatkXvs9J7"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EaSJKBc32nzTN2a_LRFFIDd2kwLdD0oJrd43cygyElHq01H6QzatkXvs9J7\"}"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"afb41fcc-5c5f-42bf-bc51-0f6c10fac834","keyName":"e2e-auth-iso-a-684a0b","subscription":"e2e-auth-iso-d589e2","tenant":"e2e-shared-a-329d3d","userId":"afb41fcc-5c5f-42bf-bc51-0f6c10fac834","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/auth-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d589e2"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:33:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd9050a-a58e-4ad4-8c42-88298f286d21","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:33:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5638cf4de087ebf8858e6b592b13b27ebb29711247dce3030ddba0c5dc1c87d6"} {"level":"info","ts":"2026-07-20T16:33:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e87627234c821258ede37e6b462cbd62e6e8d8024dd4423ba473c161e21e1061"} {"level":"info","ts":"2026-07-20T16:33:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fcd4d2e24d998502850e4f6013935aaf842116e214d6c435be5f7ed4734de5a"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d247620ef671fb12f14ced086d75c8ecd0e2b020cffed1e06bf6c58d5343fb"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/435ca82359e03efc17a38874f82c4d5a5ff1ec77df18e4cc8f6054d3d984db2e"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2f561f6b7e90395afa7ed74a2d528b21d2612bd28df33a0781e6567427c139"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc222411ccb8314734398fd83bac9500c8fbeef9dbe775f4ae65d1ad5d6f40b"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0f45215e37298bc8401a2b6682e9b5ae8f2ce4f9837789ae3d894b6eceeae65"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b9f996b7b0d54f47fdf4d32c0ab10af881d9f3acbbb2223667d903baf3bf6c9"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f1086ce6ed0873c1e6e35b14a6bd5c1f6139f912ccd7b2dec48bad0aac3a1c4"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa0f05194a3d1ad82dce3e471356a148318b05e46f8dae11b2f6f9467b56aad4"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef9cb7aefd7a18918ffd5a8ca3021c3f8da842572fb70891d34958405bfca97"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/495a0794a5212093bc2d8fd5692a34265fffc11d194662ad7bd4acfbc34cde84"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a74eea1263cbfe1daec5ea51025b0d69e3be0f0073a9257974f85cb78fb2200d"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7756ecbc39e8cc750b942f2fdfc735bbe6cb1a98cd3b43146322765b709a9b27"} {"level":"info","ts":"2026-07-20T16:33:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cbd66c2bf7316a1cc7c34be631f6dd039d7aeb1b30eda8835a02d5bae857eed"} {"level":"debug","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060f096-3191-4283-83a9-4990d2b79e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40140","PortSpecifier":{"PortValue":40140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1060f096-3191-4283-83a9-4990d2b79e46","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060f096-3191-4283-83a9-4990d2b79e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40140","PortSpecifier":{"PortValue":40140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565254,"nanos":950392358},"http":{"id":"1060f096-3191-4283-83a9-4990d2b79e46","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1060f096-3191-4283-83a9-4990d2b79e46","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1060f096-3191-4283-83a9-4990d2b79e46","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/sub-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060f096-3191-4283-83a9-4990d2b79e46","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060f096-3191-4283-83a9-4990d2b79e46","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060f096-3191-4283-83a9-4990d2b79e46","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54802","PortSpecifier":{"PortValue":54802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54802","PortSpecifier":{"PortValue":54802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565254,"nanos":995017318},"http":{"id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/sub-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5fa0c33-6283-417e-aa13-bff172f58fc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40142","PortSpecifier":{"PortValue":40142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27d98691-94ba-48dc-bab8-b85b77ebc298","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40142","PortSpecifier":{"PortValue":40142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565255,"nanos":30560862},"http":{"id":"27d98691-94ba-48dc-bab8-b85b77ebc298","method":"GET","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FA3bUBhoS6Ha5CKG_jwU9ZAyFwLFJE5QL2erbm5jD2g2HHZRE72N8fatNaDg"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FA3bUBhoS6Ha5CKG_jwU9ZAyFwLFJE5QL2erbm5jD2g2HHZRE72N8fatNaDg\"}"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d28c4957-537b-4759-8385-1bc290e3a7eb","keyName":"e2e-sub-iso-5b0792","subscription":"e2e-a-only-e9522c","tenant":"e2e-shared-a-329d3d","userId":"d28c4957-537b-4759-8385-1bc290e3a7eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/sub-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e9522c"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d98691-94ba-48dc-bab8-b85b77ebc298","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54810","PortSpecifier":{"PortValue":54810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54810","PortSpecifier":{"PortValue":54810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565255,"nanos":70896161},"http":{"id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","method":"GET","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UXBktEJL75lRpiXY_4XM9ZDGR52eLh1e9RP1SDdm4EAsg8Zr0RRJjCvGv1m1"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UXBktEJL75lRpiXY_4XM9ZDGR52eLh1e9RP1SDdm4EAsg8Zr0RRJjCvGv1m1\"}"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"84d30222-0d38-450c-8007-20abe60b3a4b","keyName":"e2e-sub-iso-5dcfa0","subscription":"e2e-b-only-e9522c","tenant":"e2e-shared-b-02789d","userId":"84d30222-0d38-450c-8007-20abe60b3a4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/sub-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e9522c"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d3017c-55fa-4721-ba7f-e58ec0e7e36e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"info","ts":"2026-07-20T16:34:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"error","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"error","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87546ee2-db49-4c50-97d8-c081526648ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50728","PortSpecifier":{"PortValue":50728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87546ee2-db49-4c50-97d8-c081526648ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87546ee2-db49-4c50-97d8-c081526648ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50728","PortSpecifier":{"PortValue":50728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565273,"nanos":520482408},"http":{"id":"87546ee2-db49-4c50-97d8-c081526648ed","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87546ee2-db49-4c50-97d8-c081526648ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87546ee2-db49-4c50-97d8-c081526648ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/sub-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87546ee2-db49-4c50-97d8-c081526648ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87546ee2-db49-4c50-97d8-c081526648ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87546ee2-db49-4c50-97d8-c081526648ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46130","PortSpecifier":{"PortValue":46130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46130","PortSpecifier":{"PortValue":46130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565273,"nanos":559297478},"http":{"id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/sub-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79db2a5-e0ce-4331-b36f-55a28f5b49f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50744","PortSpecifier":{"PortValue":50744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50744","PortSpecifier":{"PortValue":50744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565273,"nanos":596521077},"http":{"id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10nSFz1yWqqIcSk6y_tNX8QTM5FPoSil0zIRod7RA0R2Z0p0DcJdqiRa93m2V"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10nSFz1yWqqIcSk6y_tNX8QTM5FPoSil0zIRod7RA0R2Z0p0DcJdqiRa93m2V\"}"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5af5ac46-6675-48b6-ac3b-76e6504b1bd7","keyName":"e2e-sub-iso-4868f0","subscription":"e2e-shared-sub-08a1e0","tenant":"e2e-shared-a-329d3d","userId":"5af5ac46-6675-48b6-ac3b-76e6504b1bd7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/sub-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-08a1e0"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afa8afe5-f3c0-4e89-b077-ae0ce42a824b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c7a137d-5085-4558-afec-489759c6cf12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46142","PortSpecifier":{"PortValue":46142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c7a137d-5085-4558-afec-489759c6cf12","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c7a137d-5085-4558-afec-489759c6cf12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46142","PortSpecifier":{"PortValue":46142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565273,"nanos":623114193},"http":{"id":"1c7a137d-5085-4558-afec-489759c6cf12","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VmBsuUoo8x9SzyO7_DvuqMvcYankBK7TS7mZrb3MGn14V6syxGv40KQMenFu"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VmBsuUoo8x9SzyO7_DvuqMvcYankBK7TS7mZrb3MGn14V6syxGv40KQMenFu\"}"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ad6fa77a-b08a-489e-b14e-39a1a4b2ea3f","keyName":"e2e-sub-iso-b7487a","subscription":"e2e-shared-sub-08a1e0","tenant":"e2e-shared-b-02789d","userId":"ad6fa77a-b08a-489e-b14e-39a1a4b2ea3f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c7a137d-5085-4558-afec-489759c6cf12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/sub-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c7a137d-5085-4558-afec-489759c6cf12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-08a1e0"} {"level":"info","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c7a137d-5085-4558-afec-489759c6cf12","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:34:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c7a137d-5085-4558-afec-489759c6cf12","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86567e30dfae5ae0cd58ab136bf1aceb1a4036d9b4b1bbed2c476f43f9f49938"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb001d436513d634abc1263aeb7c96f2a8c55af938436ab5b37753fdc735040c"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b4343a3440463cbc38b3b7fdc5be4c6935aa3369c9b2a34434c66ff80455c1"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54e6d211d3e86c69de170d8d42bd1454f4b6f6d584bc09d9ce5065e6bc2680a2"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73cf35e86e584ebcf6419ee3f8d3ec43ebb515e93ee611f8fffb974249426354"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1df86e24b8fcd008ac74f9a545e4837914ef0adbed5719f238f07d6b4dcf87e5"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe4a30ee319dcd53c9f3b3c6d83301c119cc2704a7dd46c6bbd43d2aac6411e"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c96bfff5a13d4d176bcf06078c0345ae8a29a0402414a4bffa6a4414af965cd"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb994ce5424b0d643bdfbc3a652f5e66c72daa83d4172299d65d1997cd592dc4"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/965ac9abf3c60cf900c50d28128f0b0698f291163c623cf62234e1baba88365a"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/574c71400edd44c3e66ef447585285b0477d42673ef0c6c53e7e5a59ae2894f4"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb0c0a61096cc59bfc7dd0d1b438e3c37fa5518319a0d5d3f62b3cffb8dd0e3b"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7610e094bf3d704cd889e06907a9fc54d7aaa652b0621a9f0139ad7840b67eca"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94bb278bfcdca98da116865f616f6049245a7c7f893591c9dbf60570202c73b4"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27c08271ac50041ebbe0dce8236079114b8839e8bd969decbf28da7bf96a5bff"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d25ccc38a9bbe057a2fa85e7bedd9e2849e5491238ebecc6324fe8faa0dbb1f"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17"} {"level":"error","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"} {"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565333,"nanos":870685622},"http":{"id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae249c9e-4f44-40c5-bf4c-30b006b54625","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39390","PortSpecifier":{"PortValue":39390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3115a9b2-b006-4ded-a962-da6a2deffa73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39390","PortSpecifier":{"PortValue":39390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565333,"nanos":909706623},"http":{"id":"3115a9b2-b006-4ded-a962-da6a2deffa73","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3115a9b2-b006-4ded-a962-da6a2deffa73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44176","PortSpecifier":{"PortValue":44176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9248ea16-b0b2-4610-81cd-9097d9015579","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44176","PortSpecifier":{"PortValue":44176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565333,"nanos":947630605},"http":{"id":"9248ea16-b0b2-4610-81cd-9097d9015579","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9248ea16-b0b2-4610-81cd-9097d9015579","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44180","PortSpecifier":{"PortValue":44180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44180","PortSpecifier":{"PortValue":44180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565335,"nanos":5894948},"http":{"id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ba6c1a2-a98e-443e-b8d0-dd0cf6467dc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44196","PortSpecifier":{"PortValue":44196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44196","PortSpecifier":{"PortValue":44196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565336,"nanos":39408054},"http":{"id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65bbd2f-51cd-4dc6-8320-e02da60ee1b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb9b3e3f-99be-411c-b032-c786b29384e9","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44210","PortSpecifier":{"PortValue":44210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565337,"nanos":76317418},"http":{"id":"fb9b3e3f-99be-411c-b032-c786b29384e9","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb9b3e3f-99be-411c-b032-c786b29384e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565338,"nanos":107446526},"http":{"id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0536aff8-d6fc-9e26-8547-d3cc0852a039","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"780df277-0fa0-4571-a659-569274290774","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"780df277-0fa0-4571-a659-569274290774","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"780df277-0fa0-4571-a659-569274290774","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565339,"nanos":145426344},"http":{"id":"780df277-0fa0-4571-a659-569274290774","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"780df277-0fa0-4571-a659-569274290774","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"780df277-0fa0-4571-a659-569274290774","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"780df277-0fa0-4571-a659-569274290774","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780df277-0fa0-4571-a659-569274290774","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"780df277-0fa0-4571-a659-569274290774","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"780df277-0fa0-4571-a659-569274290774","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44240","PortSpecifier":{"PortValue":44240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"299cf016-8730-4cf7-b481-4f5677a14494","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44240","PortSpecifier":{"PortValue":44240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565340,"nanos":177709056},"http":{"id":"299cf016-8730-4cf7-b481-4f5677a14494","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"299cf016-8730-4cf7-b481-4f5677a14494","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"299cf016-8730-4cf7-b481-4f5677a14494","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299cf016-8730-4cf7-b481-4f5677a14494","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"299cf016-8730-4cf7-b481-4f5677a14494","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44246","PortSpecifier":{"PortValue":44246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44246","PortSpecifier":{"PortValue":44246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565341,"nanos":213100718},"http":{"id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uFQHapjAQZSvo24H_QXH1kOT44zUAdxQUgiGlPTmhvE1MJiB7D1ku5d8flLd\"}"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","subscription":"e2e-rate-iso-a-a7bc0d","tenant":"e2e-shared-a-329d3d","userId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7bc0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7bc0d"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55f0149f-2562-460b-a0fb-04d0f9b277b8","keyName":"e2e-rate-a-a7bc0d","selected_subscription":"e2e-rate-iso-a-a7bc0d","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-a7bc0d@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7bc0d","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02721086-5e42-42a7-9fb0-1f71ab292aa3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57336","PortSpecifier":{"PortValue":57336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57336","PortSpecifier":{"PortValue":57336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565349,"nanos":919863207},"http":{"id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f484e1c6-4b48-4e03-a157-b69b14193c9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43834","PortSpecifier":{"PortValue":43834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a86ecb56-5cbd-4c14-a376-fd481578340b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43834","PortSpecifier":{"PortValue":43834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565349,"nanos":957052449},"http":{"id":"a86ecb56-5cbd-4c14-a376-fd481578340b","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"]}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/768a921f6986"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1de2ed69-1468-4f41-bf86-7b403711dc42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8f57359a-c1e0-4bfd-b8ab-3e28a24f115a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a86ecb56-5cbd-4c14-a376-fd481578340b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3248780-afca-435a-b744-66c673389cb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57342","PortSpecifier":{"PortValue":57342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3248780-afca-435a-b744-66c673389cb6","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3248780-afca-435a-b744-66c673389cb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57342","PortSpecifier":{"PortValue":57342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565349,"nanos":990109077},"http":{"id":"d3248780-afca-435a-b744-66c673389cb6","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3248780-afca-435a-b744-66c673389cb6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla\"}"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","subscription":"e2e-rate-iso-a-28edd6","tenant":"e2e-shared-a-329d3d","userId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3248780-afca-435a-b744-66c673389cb6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3248780-afca-435a-b744-66c673389cb6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-28edd6"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3248780-afca-435a-b744-66c673389cb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","selected_subscription":"e2e-rate-iso-a-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-28edd6@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3248780-afca-435a-b744-66c673389cb6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3248780-afca-435a-b744-66c673389cb6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57346","PortSpecifier":{"PortValue":57346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e8cf66-1b70-4b96-a356-220494621e02","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57346","PortSpecifier":{"PortValue":57346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565351,"nanos":52516012},"http":{"id":"e3e8cf66-1b70-4b96-a356-220494621e02","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla\"}"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","subscription":"e2e-rate-iso-a-28edd6","tenant":"e2e-shared-a-329d3d","userId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-28edd6"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","selected_subscription":"e2e-rate-iso-a-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-28edd6@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e8cf66-1b70-4b96-a356-220494621e02","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34584","PortSpecifier":{"PortValue":34584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","method":"POST","path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions","host":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34584","PortSpecifier":{"PortValue":34584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565352,"nanos":88759007},"http":{"id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","method":"POST","headers":{":authority":"e2e-shared-a-329d3d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AHlLM62CvAPFSHqe_YF3FOFll4cZLaqFXVQ7DNBfcdVjah3nXFgfD9AwMMla\"}"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","subscription":"e2e-rate-iso-a-28edd6","tenant":"e2e-shared-a-329d3d","userId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\",\"requestedSubscription\":\"e2e-rate-iso-a-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-329d3d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-329d3d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-28edd6"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c2c44932-547a-4e8f-8e63-78792a64cd3d","keyName":"e2e-rate-a-28edd6","selected_subscription":"e2e-rate-iso-a-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-a-329d3d/e2e-rate-iso-a-28edd6@ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-329d3d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-28edd6","namespace":"ai-tenant-e2e-shared-a-329d3d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-329d3d/rate-test-model-329d3d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6865854-fca2-457e-81c2-e3ea2d7b3b9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46578","PortSpecifier":{"PortValue":46578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e611a756-f252-4794-9fba-bc067cc0c3e9","method":"POST","path":"/ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d/v1/completions","host":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46578","PortSpecifier":{"PortValue":46578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784565352,"nanos":122463063},"http":{"id":"e611a756-f252-4794-9fba-bc067cc0c3e9","method":"POST","headers":{":authority":"e2e-shared-b-02789d.apps.7ed29ae5-786a-4cdc-94cc-768a921f6986.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fr6rOZGLtr3ycgSK_CeQTtLpzQ4cVp1znsPqsFoQPVwvapgS8GrlpP8fDlfV"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fr6rOZGLtr3ycgSK_CeQTtLpzQ4cVp1znsPqsFoQPVwvapgS8GrlpP8fDlfV\"}"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b686b61-c40e-479a-8235-09326ceeddda","keyName":"e2e-rate-b-28edd6","subscription":"e2e-rate-iso-b-28edd6","tenant":"e2e-shared-b-02789d","userId":"4b686b61-c40e-479a-8235-09326ceeddda","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\",\"requestedSubscription\":\"e2e-rate-iso-b-28edd6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-02789d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-02789d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-28edd6","namespace":"ai-tenant-e2e-shared-b-02789d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d"}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-02789d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-28edd6"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4b686b61-c40e-479a-8235-09326ceeddda","keyName":"e2e-rate-b-28edd6","selected_subscription":"e2e-rate-iso-b-28edd6","selected_subscription_key":"ai-tenant-e2e-shared-b-02789d/e2e-rate-iso-b-28edd6@ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-02789d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-28edd6","namespace":"ai-tenant-e2e-shared-b-02789d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-02789d/rate-test-model-02789d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e611a756-f252-4794-9fba-bc067cc0c3e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9776c889d2d1d74a492a0819f4a93448f9c4a6741c6e9d6725fe441f0c5b757b"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8fbd5efb8f9f983b1f513ba68a74cac156ad4bbb745b533501ea04180e2c7c"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/771628a6ee8e75844363b634e35a68f9f53794b11babad986d4e59233eea7183"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73eec081e2001d588b36a5b28dfb5f7baec569a318665e0a1607ec115a4b6dc1"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea112d2de4388b6c33e90eb66707a3746ed15cd1a9e4abd80963d4483136268"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c62f134d4c045c9841ae74ac9a70edc6f61fc844e31046765a8ca2b17244b17"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818c9fa4dbf8c0bba79f3cd8e2f2350e4535679f76f2c08d2a9b13caeda5cadd"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80e738c912c4138160f0cca8e2bae6a5804d4cb41c3956c2027f484a29f4dcb2"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f7d98c30cb54c21670641f78d5da3b7f759d6bacd3fc48da83f32b343d2762b"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd107faef417a4003922ab95f66f92acd9729c07a08deae239c114591153234e"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a68cc110e23b1773f719ec0f5412c14673a24e475740a1fc1371395469b19b5e"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b06215d7d57e5d92b35cbc7024f24365105d57cc3940d6195c44990532fef481"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ef937719be333a03714f1642750f2bee81861d67c40cc111e72b9db7cef837"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0de06fc7c3215ccf53ce1b49744071400f58c3b1553d0d351f7d600d9f09e821"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f777ae87b140805a68f4137455cf2c8a8fde94418b77ad5d5fff5a0744b332bb"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9132a9f5aa1c289d1496c8cead53a0c4a1baf00d12abcacdf69ba8f37e578e"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085f320aa597ec08ce03f00cd9c43cf6acbf885833286ccb2ed0095a0d96389c"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e423e1c284f1e6767212f5f817f3592e759f96f90de299037984e75fc4c7ae8b"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a9f75630d66ae81f30e3e7bf40778d76811e2d424f48407d14eea714036476"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dacda966f11ed87f7b1f4f097c58d5b390f2ee95d713f25dd618e255fc2b80e"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4906ce25ce6ca1eb3d08d69bda4b8419b7d592876266d711d78a9b9a4882c0ba"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/250b67151c000fbfc4b4466e7aed41165a393ba91ea7fbbb666a64da9a949ec2"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dd54e6ff6b1ed1c626f8f1ff56b5f5ae21a97b21b352aac56c43063dc560647"} {"level":"info","ts":"2026-07-20T16:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78edea4e759ea2e3562cfb231c34be752246d13d15ef6a704fe69d8420accd3b"}