--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423"} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"debug","ts":"2026-07-14T01:41:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"debug","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:41:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"} {"level":"debug","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"} {"level":"info","ts":"2026-07-14T01:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54036","PortSpecifier":{"PortValue":54036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54036","PortSpecifier":{"PortValue":54036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993303,"nanos":114871447},"http":{"id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d0a3e5c-af45-4f12-b57a-b36e02e03b56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60314","PortSpecifier":{"PortValue":60314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60314","PortSpecifier":{"PortValue":60314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993303,"nanos":186739094},"http":{"id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2126825c-66e6-43dc-afa1-0cf2dde0cbcf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54046","PortSpecifier":{"PortValue":54046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","method":"GET","path":"/maas-api/v1/api-keys/664bec72-78fb-4ebd-944d-f9db317a2f3b","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54046","PortSpecifier":{"PortValue":54046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993303,"nanos":255915979},"http":{"id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","method":"GET","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/664bec72-78fb-4ebd-944d-f9db317a2f3b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/664bec72-78fb-4ebd-944d-f9db317a2f3b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28cb2f3-de74-4342-bf0e-f122682a9da0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60326","PortSpecifier":{"PortValue":60326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ec33769-414b-4bbd-bb63-551384ce397c","method":"GET","path":"/maas-api/v1/api-keys/b79443a5-5e20-48e8-9d98-da0a13536605","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60326","PortSpecifier":{"PortValue":60326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993303,"nanos":297909463},"http":{"id":"5ec33769-414b-4bbd-bb63-551384ce397c","method":"GET","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b79443a5-5e20-48e8-9d98-da0a13536605",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b79443a5-5e20-48e8-9d98-da0a13536605",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:41:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec33769-414b-4bbd-bb63-551384ce397c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60802","PortSpecifier":{"PortValue":60802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60802","PortSpecifier":{"PortValue":60802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993322,"nanos":686210332},"http":{"id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44aa01c6-fe00-4f77-92fa-be6d977744ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46122","PortSpecifier":{"PortValue":46122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46122","PortSpecifier":{"PortValue":46122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993322,"nanos":751375794},"http":{"id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd0c4156-ff1f-425d-a6bd-61152d32091d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60812","PortSpecifier":{"PortValue":60812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60812","PortSpecifier":{"PortValue":60812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993322,"nanos":804094717},"http":{"id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","method":"GET","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18VGZUtQ9ttg6FP4J_gUL4SEDvz4h0ELLReCazmOhAYFo5BFLz8K1JFHu417M"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18VGZUtQ9ttg6FP4J_gUL4SEDvz4h0ELLReCazmOhAYFo5BFLz8K1JFHu417M\"}"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"091317ce-9b13-485c-8211-ee413dc00296","keyName":"e2e-auth-iso-a-c44a5c","subscription":"e2e-auth-iso-5204a0","tenant":"e2e-shared-a-c6543c","userId":"091317ce-9b13-485c-8211-ee413dc00296","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5204a0"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649a9351-d7d1-4062-bc1d-9f26efceff3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"495b967b-2adf-4755-95b3-9517b2f50390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39218","PortSpecifier":{"PortValue":39218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"495b967b-2adf-4755-95b3-9517b2f50390","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"495b967b-2adf-4755-95b3-9517b2f50390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39218","PortSpecifier":{"PortValue":39218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993339,"nanos":951794156},"http":{"id":"495b967b-2adf-4755-95b3-9517b2f50390","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"495b967b-2adf-4755-95b3-9517b2f50390","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"495b967b-2adf-4755-95b3-9517b2f50390","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"495b967b-2adf-4755-95b3-9517b2f50390","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"495b967b-2adf-4755-95b3-9517b2f50390","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"495b967b-2adf-4755-95b3-9517b2f50390","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36782","PortSpecifier":{"PortValue":36782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36782","PortSpecifier":{"PortValue":36782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993339,"nanos":989405028},"http":{"id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4915fa2-9f38-458d-aad6-e9c0ef76419d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36790","PortSpecifier":{"PortValue":36790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36790","PortSpecifier":{"PortValue":36790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993340,"nanos":24695322},"http":{"id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","method":"GET","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AFa0PtVQbYzBab1W_gQm3K9O4E6Zm3v4Vf1wCCX1iXsKXzibVrkd7A20NemT"} {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AFa0PtVQbYzBab1W_gQm3K9O4E6Zm3v4Vf1wCCX1iXsKXzibVrkd7A20NemT\"}"} {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T01:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d7d5c5-85d7-4405-9c4f-446757e0deaf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57658","PortSpecifier":{"PortValue":57658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57658","PortSpecifier":{"PortValue":57658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993357,"nanos":240246313},"http":{"id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb89d67f-b7b4-4bdd-b9f2-88f1215dd3d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0791063a-f3d6-4b27-8776-886674480125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53478","PortSpecifier":{"PortValue":53478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0791063a-f3d6-4b27-8776-886674480125","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0791063a-f3d6-4b27-8776-886674480125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53478","PortSpecifier":{"PortValue":53478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993357,"nanos":277538808},"http":{"id":"0791063a-f3d6-4b27-8776-886674480125","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0791063a-f3d6-4b27-8776-886674480125","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0791063a-f3d6-4b27-8776-886674480125","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0791063a-f3d6-4b27-8776-886674480125","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0791063a-f3d6-4b27-8776-886674480125","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0791063a-f3d6-4b27-8776-886674480125","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"962a706c-6695-4944-8fc3-1836de1eb164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57674","PortSpecifier":{"PortValue":57674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"962a706c-6695-4944-8fc3-1836de1eb164","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"962a706c-6695-4944-8fc3-1836de1eb164","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57674","PortSpecifier":{"PortValue":57674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993357,"nanos":314286538},"http":{"id":"962a706c-6695-4944-8fc3-1836de1eb164","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"962a706c-6695-4944-8fc3-1836de1eb164","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"962a706c-6695-4944-8fc3-1836de1eb164","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"962a706c-6695-4944-8fc3-1836de1eb164","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"962a706c-6695-4944-8fc3-1836de1eb164","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"962a706c-6695-4944-8fc3-1836de1eb164","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e02db926-280f-470d-87fb-bd2854ff579b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53492","PortSpecifier":{"PortValue":53492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e02db926-280f-470d-87fb-bd2854ff579b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e02db926-280f-470d-87fb-bd2854ff579b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53492","PortSpecifier":{"PortValue":53492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993357,"nanos":349476988},"http":{"id":"e02db926-280f-470d-87fb-bd2854ff579b","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e02db926-280f-470d-87fb-bd2854ff579b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e02db926-280f-470d-87fb-bd2854ff579b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02db926-280f-470d-87fb-bd2854ff579b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e02db926-280f-470d-87fb-bd2854ff579b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e02db926-280f-470d-87fb-bd2854ff579b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2873db4-bd60-483a-a38e-dba156756f71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46704","PortSpecifier":{"PortValue":46704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2873db4-bd60-483a-a38e-dba156756f71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2873db4-bd60-483a-a38e-dba156756f71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46704","PortSpecifier":{"PortValue":46704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993374,"nanos":598958580},"http":{"id":"e2873db4-bd60-483a-a38e-dba156756f71","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2873db4-bd60-483a-a38e-dba156756f71","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2873db4-bd60-483a-a38e-dba156756f71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2873db4-bd60-483a-a38e-dba156756f71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2873db4-bd60-483a-a38e-dba156756f71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2873db4-bd60-483a-a38e-dba156756f71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58250","PortSpecifier":{"PortValue":58250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58250","PortSpecifier":{"PortValue":58250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993374,"nanos":636976067},"http":{"id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c81fd363-d2fc-4b0d-a772-64418cdfcae1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58266","PortSpecifier":{"PortValue":58266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","method":"GET","path":"/maas-api/v1/api-keys/cc3f056c-41ff-4ec3-8ca3-fa278c9139d6","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58266","PortSpecifier":{"PortValue":58266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993374,"nanos":671360062},"http":{"id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","method":"GET","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cc3f056c-41ff-4ec3-8ca3-fa278c9139d6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cc3f056c-41ff-4ec3-8ca3-fa278c9139d6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b87db51-2cbf-4d5e-806f-0c7c25407025","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46718","PortSpecifier":{"PortValue":46718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c126088f-da6f-4c78-821a-cdf63df377a8","method":"GET","path":"/maas-api/v1/api-keys/cc3f056c-41ff-4ec3-8ca3-fa278c9139d6","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46718","PortSpecifier":{"PortValue":46718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993374,"nanos":700989910},"http":{"id":"c126088f-da6f-4c78-821a-cdf63df377a8","method":"GET","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cc3f056c-41ff-4ec3-8ca3-fa278c9139d6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cc3f056c-41ff-4ec3-8ca3-fa278c9139d6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:42:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c126088f-da6f-4c78-821a-cdf63df377a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52932916-0fc1-438c-bcee-c216d71357d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51422","PortSpecifier":{"PortValue":51422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52932916-0fc1-438c-bcee-c216d71357d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52932916-0fc1-438c-bcee-c216d71357d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51422","PortSpecifier":{"PortValue":51422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993389,"nanos":803607364},"http":{"id":"52932916-0fc1-438c-bcee-c216d71357d5","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52932916-0fc1-438c-bcee-c216d71357d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52932916-0fc1-438c-bcee-c216d71357d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52932916-0fc1-438c-bcee-c216d71357d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52932916-0fc1-438c-bcee-c216d71357d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52932916-0fc1-438c-bcee-c216d71357d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e183122-16ab-4f68-b16c-c867bf417912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35824","PortSpecifier":{"PortValue":35824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e183122-16ab-4f68-b16c-c867bf417912","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e183122-16ab-4f68-b16c-c867bf417912","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35824","PortSpecifier":{"PortValue":35824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993389,"nanos":841204753},"http":{"id":"9e183122-16ab-4f68-b16c-c867bf417912","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e183122-16ab-4f68-b16c-c867bf417912","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e183122-16ab-4f68-b16c-c867bf417912","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/auth-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e183122-16ab-4f68-b16c-c867bf417912","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e183122-16ab-4f68-b16c-c867bf417912","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e183122-16ab-4f68-b16c-c867bf417912","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51428","PortSpecifier":{"PortValue":51428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51428","PortSpecifier":{"PortValue":51428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993389,"nanos":874514021},"http":{"id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MdCiNitAHL4dRA3R_WnuCmATY3QA2hhbpANjcVebNzi32oo6ZHQRIECpio0a"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MdCiNitAHL4dRA3R_WnuCmATY3QA2hhbpANjcVebNzi32oo6ZHQRIECpio0a\"}"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82a41031-a09d-4731-9215-a16461ef8ac3","keyName":"e2e-auth-iso-a-9fe79e","subscription":"e2e-auth-iso-d16bbc","tenant":"e2e-shared-a-c6543c","userId":"82a41031-a09d-4731-9215-a16461ef8ac3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/auth-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d16bbc"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aad3bf44-e20a-4231-bb4c-095c87012fe3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6660cae4034311fa60a5cf3214d74f7972dc857406f835d94dc1395cd874f8"} {"level":"info","ts":"2026-07-14T01:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1594c025735bfe4a80a4e1cf21e61f1f4376f0ba82eca24962703140b8fb2794"} {"level":"info","ts":"2026-07-14T01:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9acec7781907e95c5be5be07c32de6e171121e802d257773ba4ebc0d9901dc1"} {"level":"info","ts":"2026-07-14T01:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c6cb68d39d0c07adb0bdbf2cfef9914efe627fb7c39fc51c4177c59f0db237d"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a198defb8fb955a56637e2bc2cf44da9331a49f6ed5f9be5e718d6fee5bed8d"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6e0530a7e4da85f66fd4f9698c705eae8eb7b4fc7fecdbe861ec4a7fae869fd"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a55e56c6447fa2b6e0cb0593a6000c45f6bb2970c66bae22d2e809e510aebb1"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf74536e1f59051a4c3d0ed04c8bce6e4fa55ce419df844548fad6a08eb856b9"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd039ba76ad6acf653552ecfce5c44cffd02e8fa53e62054882d6e736b7b3423"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffe1a1fdc80fcd5630dae517a83bde50d61e01a32eb6419909784b0d362da921"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fd8b01ff8c828fd00ae9ea8fe77d07bd99da09359fcd32ca956703bcf407a9a"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbcbe8b49ecb1797b827101217415b1c27892ee003023167a5579666a2ee4ca2"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d1c41455fb796395e9f51a8d3700137c974b461c13f12c4125a2f7ada32b3ac"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c44a47c69fe634d7b07e9cca07813d44bf0a2b53eaa098d0ad5aea6b8c4065"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80834aef7cad7a87e47d43a156bb5321c1a6e43c818deacc196284f64eb3c2fe"} {"level":"info","ts":"2026-07-14T01:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9cadab403394c34956441148f77b2ff7627e2f1e8ad890a3888a3a597474913"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"error","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"} {"level":"error","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90"} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90"} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:43:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:43:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"} {"level":"error","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90"} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"} {"level":"error","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50"} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3deaaad7-7026-483e-8b69-742413213ffc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41320","PortSpecifier":{"PortValue":41320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3deaaad7-7026-483e-8b69-742413213ffc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3deaaad7-7026-483e-8b69-742413213ffc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41320","PortSpecifier":{"PortValue":41320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993460,"nanos":926607306},"http":{"id":"3deaaad7-7026-483e-8b69-742413213ffc","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3deaaad7-7026-483e-8b69-742413213ffc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3deaaad7-7026-483e-8b69-742413213ffc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/sub-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3deaaad7-7026-483e-8b69-742413213ffc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3deaaad7-7026-483e-8b69-742413213ffc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3deaaad7-7026-483e-8b69-742413213ffc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48940","PortSpecifier":{"PortValue":48940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48940","PortSpecifier":{"PortValue":48940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993460,"nanos":969792812},"http":{"id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/sub-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0426fb9-dcc2-4f8e-9ac8-85beca7e1955","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"416daa6a-40ad-482f-a021-d6525491fe90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"416daa6a-40ad-482f-a021-d6525491fe90","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"416daa6a-40ad-482f-a021-d6525491fe90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993461,"nanos":9930968},"http":{"id":"416daa6a-40ad-482f-a021-d6525491fe90","method":"GET","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-k1xCpp5t9TJxswPG_8sW4PJwyMOJSYtibaF3ZfpDn5RTpt5SrKtiApYv6VkW"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-k1xCpp5t9TJxswPG_8sW4PJwyMOJSYtibaF3ZfpDn5RTpt5SrKtiApYv6VkW\"}"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8fa94f6c-6d1b-45ca-ad4d-891702c61b11","keyName":"e2e-sub-iso-3c5583","subscription":"e2e-a-only-c6483c","tenant":"e2e-shared-a-c6543c","userId":"8fa94f6c-6d1b-45ca-ad4d-891702c61b11","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"416daa6a-40ad-482f-a021-d6525491fe90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/sub-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"416daa6a-40ad-482f-a021-d6525491fe90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c6483c"} {"level":"info","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"416daa6a-40ad-482f-a021-d6525491fe90","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"416daa6a-40ad-482f-a021-d6525491fe90","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48946","PortSpecifier":{"PortValue":48946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48946","PortSpecifier":{"PortValue":48946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993461,"nanos":52844205},"http":{"id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","method":"GET","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kxwrLIqUB8ShXvsU_FY68446d1KfUoxoj5AOpv5vccztOIpcxCD4kuia6BIO"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kxwrLIqUB8ShXvsU_FY68446d1KfUoxoj5AOpv5vccztOIpcxCD4kuia6BIO\"}"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c18974ee-cb79-4207-9e1e-8d5304504e8a","keyName":"e2e-sub-iso-1c4b8f","subscription":"e2e-b-only-c6483c","tenant":"e2e-shared-b-a21fee","userId":"c18974ee-cb79-4207-9e1e-8d5304504e8a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/sub-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c6483c"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c0fa80-d35a-4bd6-91d9-a8318e7e162f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49960","PortSpecifier":{"PortValue":49960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49960","PortSpecifier":{"PortValue":49960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993479,"nanos":568530610},"http":{"id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/sub-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd9e9fd9-2c0f-4c82-83f1-26722995eeba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39958","PortSpecifier":{"PortValue":39958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39958","PortSpecifier":{"PortValue":39958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993479,"nanos":604964251},"http":{"id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/sub-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26eb8fc-fb36-4826-abbc-447033ec9b1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993479,"nanos":640185338},"http":{"id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PwJu0yjRo6Sq98p9_rnVscT9FfYKjNV9foIZDNpr188JDneSgA4bFX4eq3E3"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PwJu0yjRo6Sq98p9_rnVscT9FfYKjNV9foIZDNpr188JDneSgA4bFX4eq3E3\"}"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9e9b094-ea37-4598-ad04-672ec8bc8376","keyName":"e2e-sub-iso-144f18","subscription":"e2e-shared-sub-9ad699","tenant":"e2e-shared-a-c6543c","userId":"b9e9b094-ea37-4598-ad04-672ec8bc8376","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/sub-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9ad699"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b2158f-e669-4a28-9d7d-2dff1eec201d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b074f572-558c-404a-9bfd-203da72b0538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60824","PortSpecifier":{"PortValue":60824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b074f572-558c-404a-9bfd-203da72b0538","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b074f572-558c-404a-9bfd-203da72b0538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60824","PortSpecifier":{"PortValue":60824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993479,"nanos":670479761},"http":{"id":"b074f572-558c-404a-9bfd-203da72b0538","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CSU7tlCo20TPKy7g_pNYnI38AT7DGMcV8Hi6Gh8IJ573NbwBQCMtOJCvI05E"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CSU7tlCo20TPKy7g_pNYnI38AT7DGMcV8Hi6Gh8IJ573NbwBQCMtOJCvI05E\"}"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"47177e87-38cb-4044-bd23-be76bf0ba5eb","keyName":"e2e-sub-iso-4fc9ae","subscription":"e2e-shared-sub-9ad699","tenant":"e2e-shared-b-a21fee","userId":"47177e87-38cb-4044-bd23-be76bf0ba5eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b074f572-558c-404a-9bfd-203da72b0538","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/sub-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9ad699"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b074f572-558c-404a-9bfd-203da72b0538","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b074f572-558c-404a-9bfd-203da72b0538","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:44:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b074f572-558c-404a-9bfd-203da72b0538","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2ceee39c94bad6330fdd6c54b637f70d542ea868eab041582086e0de3a842ca"} {"level":"info","ts":"2026-07-14T01:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a995f288b0c243364e60ebed8956ac7b8335e76d856dd092bcca22b51db88f7a"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8156bdd4bedcf727975740ef95058d11feb49ab4b0cec857bb0d0e396634e90"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/733f175ff043a2ae359a2c3a20c7f69ced76f2d866a6bec095f9e59ecfbf2b03"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/286c315eae7b67c62f1f8a57754214bd568272d583264db1fee86ab5ef4b3fb5"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/661068bf16975118d4f742f99c5edcf861939dff4729e5a382c577c5921247c9"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cc92341016b93ec26feaf14510112d480c75ea67052fd553b81338969009165"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26a027fcbed7d6e9afddb7928b56e7fcbe87eacecab6f5b15e538be517dbba50"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cb815d80e7e83042dffeec6430ced13540217221c9fe0d11fb28a463a59e008"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10117b610580ece52f0f020b26d7a5b971c5440c9696981d0db52338909779dc"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20ed23dd39fe829a8d62ce56d81524995030a5dded35e318c8e3ca5a39fcc933"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6327fd036ebe26aec12d3e880e92c0840856efce939e1eb19b10b0ae4b56dc5"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/247c449d539850197f053046113585cbdf033c4a80bc464b7f6d85838c09e7e5"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e93b2225486e48c834b1531aa5a65a2a7305145bbeac3d3ba9b832fbb8251eb3"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76b5b982c7eed40aa5bb26feff314de3cb4906dff5032c1f22d251e309c9b0b1"} {"level":"info","ts":"2026-07-14T01:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/119b08baecd14c20b312585dd89bdd5b2b7d09c936dd9901d96a9aeab6908fc4"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"} {"level":"error","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"error","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"} {"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"} {"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"} {"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"} {"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"} {"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48824","PortSpecifier":{"PortValue":48824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48824","PortSpecifier":{"PortValue":48824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993548,"nanos":105315044},"http":{"id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993548,"nanos":146732664},"http":{"id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48828","PortSpecifier":{"PortValue":48828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b888a68d-bed1-4c47-8b99-e099c726cd11","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48828","PortSpecifier":{"PortValue":48828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993548,"nanos":188611203},"http":{"id":"b888a68d-bed1-4c47-8b99-e099c726cd11","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh\"}"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","subscription":"e2e-rate-iso-a-db48ef","tenant":"e2e-shared-a-c6543c","userId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-db48ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db48ef"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","selected_subscription":"e2e-rate-iso-a-db48ef","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-db48ef@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993549,"nanos":252516233},"http":{"id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh\"}"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","subscription":"e2e-rate-iso-a-db48ef","tenant":"e2e-shared-a-c6543c","userId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-db48ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db48ef"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","selected_subscription":"e2e-rate-iso-a-db48ef","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-db48ef@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993550,"nanos":292591311},"http":{"id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh\"}"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","subscription":"e2e-rate-iso-a-db48ef","tenant":"e2e-shared-a-c6543c","userId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-db48ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db48ef"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","selected_subscription":"e2e-rate-iso-a-db48ef","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-db48ef@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993563,"nanos":261534667},"http":{"id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58074","PortSpecifier":{"PortValue":58074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57da5657-cf55-4d6d-8761-8b25895a48e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58074","PortSpecifier":{"PortValue":58074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993563,"nanos":299349603},"http":{"id":"57da5657-cf55-4d6d-8761-8b25895a48e0","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45666","PortSpecifier":{"PortValue":45666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45666","PortSpecifier":{"PortValue":45666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993563,"nanos":334147770},"http":{"id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv\"}"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","subscription":"e2e-rate-iso-a-9e3afb","tenant":"e2e-shared-a-c6543c","userId":"822318bc-d0c6-441b-a7cb-48649ff7546b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9e3afb"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","selected_subscription":"e2e-rate-iso-a-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-9e3afb@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45678","PortSpecifier":{"PortValue":45678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"007e84df-d3f5-4956-8f37-6518823fb129","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45678","PortSpecifier":{"PortValue":45678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993564,"nanos":376201099},"http":{"id":"007e84df-d3f5-4956-8f37-6518823fb129","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv\"}"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","subscription":"e2e-rate-iso-a-9e3afb","tenant":"e2e-shared-a-c6543c","userId":"822318bc-d0c6-441b-a7cb-48649ff7546b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"007e84df-d3f5-4956-8f37-6518823fb129","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9e3afb"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","selected_subscription":"e2e-rate-iso-a-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-9e3afb@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007e84df-d3f5-4956-8f37-6518823fb129","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007e84df-d3f5-4956-8f37-6518823fb129","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3839258a-15ca-4515-bb4d-488de6b35557","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993565,"nanos":412765219},"http":{"id":"3839258a-15ca-4515-bb4d-488de6b35557","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv\"}"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","subscription":"e2e-rate-iso-a-9e3afb","tenant":"e2e-shared-a-c6543c","userId":"822318bc-d0c6-441b-a7cb-48649ff7546b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3839258a-15ca-4515-bb4d-488de6b35557","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9e3afb"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","selected_subscription":"e2e-rate-iso-a-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-9e3afb@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3839258a-15ca-4515-bb4d-488de6b35557","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3839258a-15ca-4515-bb4d-488de6b35557","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58076","PortSpecifier":{"PortValue":58076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","method":"POST","path":"/ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee/v1/completions","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58076","PortSpecifier":{"PortValue":58076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993565,"nanos":451983349},"http":{"id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KJHnubyjXIASItBf_RaQKLe4ovGSFTJ5BR3QqrLDm1MiigWZFJmCS9Mv2bbU"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KJHnubyjXIASItBf_RaQKLe4ovGSFTJ5BR3QqrLDm1MiigWZFJmCS9Mv2bbU\"}"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9bd73cf1-d012-4736-8318-87aa4af499b9","keyName":"e2e-rate-b-9e3afb","subscription":"e2e-rate-iso-b-9e3afb","tenant":"e2e-shared-b-a21fee","userId":"9bd73cf1-d012-4736-8318-87aa4af499b9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\",\"requestedSubscription\":\"e2e-rate-iso-b-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a21fee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9e3afb","namespace":"ai-tenant-e2e-shared-b-a21fee","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9e3afb"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9bd73cf1-d012-4736-8318-87aa4af499b9","keyName":"e2e-rate-b-9e3afb","selected_subscription":"e2e-rate-iso-b-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-b-a21fee/e2e-rate-iso-b-9e3afb@ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a21fee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9e3afb","namespace":"ai-tenant-e2e-shared-b-a21fee","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"} {"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"} {"level":"info","ts":"2026-07-14T01:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"} {"level":"info","ts":"2026-07-14T01:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"} {"level":"info","ts":"2026-07-14T01:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa"} {"level":"info","ts":"2026-07-14T01:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"} {"level":"info","ts":"2026-07-14T01:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"} {"level":"info","ts":"2026-07-14T01:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"} {"level":"info","ts":"2026-07-14T01:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"} {"level":"info","ts":"2026-07-14T01:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"}