--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767"} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767"} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"} {"level":"debug","ts":"2026-07-12T00:35:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"info","ts":"2026-07-12T00:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e46bff5258479b739c157303ebde2b4e629420df79424beda87a26af60236cf"} {"level":"info","ts":"2026-07-12T00:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cffeb50553765df9beb519a38f2319a7f4cdc428c1b14be9000512143be40d2"} {"level":"info","ts":"2026-07-12T00:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c3391a891327ed62491170c5f56e244a1fbd3f62f85a26351344367eb115f9"} {"level":"info","ts":"2026-07-12T00:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e3f8b4b2cab2a39930e0c29424a1684cf59d7da30e7589c47307e842d33b71"} {"level":"info","ts":"2026-07-12T00:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19c98376a2cd8e599dffeeaec2cb84071c47cf7703debfeceb0882ed5327c50c"} {"level":"info","ts":"2026-07-12T00:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8595a116b07954b9cfecc2ac6fe3f7b05c7b083accd9c76431edfaa0d19e6767"} {"level":"info","ts":"2026-07-12T00:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26e6e03c681c67ed5080d8f6f9d1f8c06ed7c1985a69cdef61eca7f8228c83b0"} {"level":"info","ts":"2026-07-12T00:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1369f0ef77660e287bfd205aee3bd9e0921ddccb95658c60af8bcb20b7d8fa6"} {"level":"debug","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c"} {"level":"debug","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c"} {"level":"debug","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"} {"level":"info","ts":"2026-07-12T00:38:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"} {"level":"error","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922"} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2"} {"level":"info","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2"} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922"} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2"} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57876","PortSpecifier":{"PortValue":57876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57876","PortSpecifier":{"PortValue":57876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816707,"nanos":749194913},"http":{"id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1cc15a0-3a42-4934-9362-c7c8819b1b9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36452","PortSpecifier":{"PortValue":36452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36452","PortSpecifier":{"PortValue":36452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816707,"nanos":813372015},"http":{"id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f59cb0d-f182-4f63-9a86-115c6f31bea5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","method":"GET","path":"/maas-api/v1/api-keys/b2d4d11c-0802-42af-b757-fdcd420f1134","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57878","PortSpecifier":{"PortValue":57878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816707,"nanos":895937736},"http":{"id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","method":"GET","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b2d4d11c-0802-42af-b757-fdcd420f1134",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b2d4d11c-0802-42af-b757-fdcd420f1134",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01b5357e-f2dc-4b36-9aa7-a1f9bf54d259","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db5e217-270c-4882-825c-363b53d06647","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36466","PortSpecifier":{"PortValue":36466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2db5e217-270c-4882-825c-363b53d06647","method":"GET","path":"/maas-api/v1/api-keys/c2777893-9716-4a1b-b812-e74a195b9295","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db5e217-270c-4882-825c-363b53d06647","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36466","PortSpecifier":{"PortValue":36466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816707,"nanos":950187958},"http":{"id":"2db5e217-270c-4882-825c-363b53d06647","method":"GET","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c2777893-9716-4a1b-b812-e74a195b9295",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2db5e217-270c-4882-825c-363b53d06647","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2db5e217-270c-4882-825c-363b53d06647","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c2777893-9716-4a1b-b812-e74a195b9295",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db5e217-270c-4882-825c-363b53d06647","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db5e217-270c-4882-825c-363b53d06647","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db5e217-270c-4882-825c-363b53d06647","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41376","PortSpecifier":{"PortValue":41376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8258873b-c68f-400a-8d58-9eb229e82e56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41376","PortSpecifier":{"PortValue":41376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816725,"nanos":520798499},"http":{"id":"8258873b-c68f-400a-8d58-9eb229e82e56","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8258873b-c68f-400a-8d58-9eb229e82e56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"506ba461-732b-4331-8d91-78bce5cffdc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816725,"nanos":563394280},"http":{"id":"506ba461-732b-4331-8d91-78bce5cffdc0","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"506ba461-732b-4331-8d91-78bce5cffdc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41382","PortSpecifier":{"PortValue":41382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41382","PortSpecifier":{"PortValue":41382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816725,"nanos":607007706},"http":{"id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","method":"GET","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5QtZCcfUAO6Yizna_JiYkQIHbo4XP3nVgtx6ug8vjDEIf7rTWNEW99Lkk7gm"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5QtZCcfUAO6Yizna_JiYkQIHbo4XP3nVgtx6ug8vjDEIf7rTWNEW99Lkk7gm\"}"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"54381fa5-43b1-4bec-a270-652d847a7a00","keyName":"e2e-auth-iso-a-38b6d1","subscription":"e2e-auth-iso-6a6435","tenant":"e2e-shared-a-45be6f","userId":"54381fa5-43b1-4bec-a270-652d847a7a00","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6a6435"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d2f356c-da4f-4ab7-af1b-11557185a8a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51268","PortSpecifier":{"PortValue":51268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51268","PortSpecifier":{"PortValue":51268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816742,"nanos":822044607},"http":{"id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3fcdad0-a0de-4a60-bd39-5bc3aeeea195","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37430","PortSpecifier":{"PortValue":37430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37430","PortSpecifier":{"PortValue":37430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816742,"nanos":855351158},"http":{"id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c5bea61-a31d-478d-98f1-c87b4da95fee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37444","PortSpecifier":{"PortValue":37444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83c59220-ad02-48ef-bbe0-31063eaa0029","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37444","PortSpecifier":{"PortValue":37444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816742,"nanos":911429258},"http":{"id":"83c59220-ad02-48ef-bbe0-31063eaa0029","method":"GET","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AYgduyqCLqHMdsXS_t0Wlu66chK3EvJazW8OlYYVYO6XNUoJpYqToM4BnOzQ"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AYgduyqCLqHMdsXS_t0Wlu66chK3EvJazW8OlYYVYO6XNUoJpYqToM4BnOzQ\"}"} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-12T00:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83c59220-ad02-48ef-bbe0-31063eaa0029","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41580","PortSpecifier":{"PortValue":41580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41580","PortSpecifier":{"PortValue":41580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816760,"nanos":168736947},"http":{"id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4dcc0e-6c99-42c2-9b7b-e42a66429ac5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57660","PortSpecifier":{"PortValue":57660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57660","PortSpecifier":{"PortValue":57660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816760,"nanos":221481235},"http":{"id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59ef2a22-b365-4ead-b7ca-5475e1cddc3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"664757ab-2031-4526-9016-e152692a017b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37840","PortSpecifier":{"PortValue":37840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"664757ab-2031-4526-9016-e152692a017b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"664757ab-2031-4526-9016-e152692a017b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37840","PortSpecifier":{"PortValue":37840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816760,"nanos":258349832},"http":{"id":"664757ab-2031-4526-9016-e152692a017b","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"664757ab-2031-4526-9016-e152692a017b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"664757ab-2031-4526-9016-e152692a017b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"664757ab-2031-4526-9016-e152692a017b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"664757ab-2031-4526-9016-e152692a017b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"664757ab-2031-4526-9016-e152692a017b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57672","PortSpecifier":{"PortValue":57672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13b63d10-41e7-4e90-9023-14a416c592ab","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57672","PortSpecifier":{"PortValue":57672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816760,"nanos":293198089},"http":{"id":"13b63d10-41e7-4e90-9023-14a416c592ab","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b63d10-41e7-4e90-9023-14a416c592ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45252","PortSpecifier":{"PortValue":45252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d7ffa03-227b-4432-a944-801035abe8cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45252","PortSpecifier":{"PortValue":45252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816777,"nanos":612024012},"http":{"id":"4d7ffa03-227b-4432-a944-801035abe8cb","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d7ffa03-227b-4432-a944-801035abe8cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43f04597-3c03-4c4c-9944-62fac4145a66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816777,"nanos":656462937},"http":{"id":"43f04597-3c03-4c4c-9944-62fac4145a66","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43f04597-3c03-4c4c-9944-62fac4145a66","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57050","PortSpecifier":{"PortValue":57050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","method":"GET","path":"/maas-api/v1/api-keys/74546200-625e-440c-b298-07702c278857","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57050","PortSpecifier":{"PortValue":57050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816777,"nanos":694479890},"http":{"id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","method":"GET","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/74546200-625e-440c-b298-07702c278857",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/74546200-625e-440c-b298-07702c278857",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23fd1e50-510a-43aa-91b1-82a4afe7666d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45266","PortSpecifier":{"PortValue":45266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"512ea7ee-d659-4569-b6dd-54ee626be071","method":"GET","path":"/maas-api/v1/api-keys/74546200-625e-440c-b298-07702c278857","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45266","PortSpecifier":{"PortValue":45266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816777,"nanos":726205552},"http":{"id":"512ea7ee-d659-4569-b6dd-54ee626be071","method":"GET","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/74546200-625e-440c-b298-07702c278857",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/74546200-625e-440c-b298-07702c278857",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512ea7ee-d659-4569-b6dd-54ee626be071","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54104","PortSpecifier":{"PortValue":54104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54104","PortSpecifier":{"PortValue":54104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816794,"nanos":885592179},"http":{"id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3a8d424-bc21-4df3-b20f-2b9f489588b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64326798-7b18-42c4-9c08-345a1574e52c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33356","PortSpecifier":{"PortValue":33356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64326798-7b18-42c4-9c08-345a1574e52c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64326798-7b18-42c4-9c08-345a1574e52c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33356","PortSpecifier":{"PortValue":33356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816794,"nanos":926085163},"http":{"id":"64326798-7b18-42c4-9c08-345a1574e52c","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"64326798-7b18-42c4-9c08-345a1574e52c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64326798-7b18-42c4-9c08-345a1574e52c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/auth-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64326798-7b18-42c4-9c08-345a1574e52c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64326798-7b18-42c4-9c08-345a1574e52c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64326798-7b18-42c4-9c08-345a1574e52c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54112","PortSpecifier":{"PortValue":54112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34fb4c49-8b9d-43dc-88bb-011232947805","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54112","PortSpecifier":{"PortValue":54112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816794,"nanos":959878011},"http":{"id":"34fb4c49-8b9d-43dc-88bb-011232947805","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MYzi4FO39nlhS5Mx_SygnEszlmNrNHlqVZ0TQ90Jagn2aAHxPf7cMPnOKFRM"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MYzi4FO39nlhS5Mx_SygnEszlmNrNHlqVZ0TQ90Jagn2aAHxPf7cMPnOKFRM\"}"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f372ddf1-cdba-46df-a89c-20966764c9a7","keyName":"e2e-auth-iso-a-7cccf8","subscription":"e2e-auth-iso-84a7b6","tenant":"e2e-shared-a-45be6f","userId":"f372ddf1-cdba-46df-a89c-20966764c9a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/auth-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-84a7b6"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34fb4c49-8b9d-43dc-88bb-011232947805","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01d70dda4a98b19c86266716caa63a36a728d20922fade73370ed7afdfc635ec"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5115566c87abd72ef459bfbd666729c9b4cd440b1b6f42b0242a657aa0b22d7"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccb292aa251dfcc5f680a44de59bbfe0ec9d9c0cce49444ce08dff762a681f32"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5987086d3c652ab418a004a3291a291bbdd0cb4c05036d56b38c7d8693012c19"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/993cae64449623c3d10bc95c079f63e29df7570d123832eb4b7d607efa1e814d"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4765cf81711af37d31304da2b03f610356e48d134b39ef489a18d34a662c516c"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c15641d28284bdb9a109de952b94628c6a2622e6bf467458602d36fdc20deac2"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75a8c82cf6cad06f2ded0dc2686360cc181023a6d8a9b79128f53543489d0922"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17abc479979d52e4ab630c8d75b905a7e09508b0c0089eeb0af5c33dadc971c0"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f18bd38b78f4bb60012bdc1120851c430efea8c0d4756375128cd52320f8c122"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c02403671a05d1f91cbbb995126b0bf15a6cfa9bc900e8db63a6147b7211a2cb"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d952cbe83912b5c4fb961d942adc6853c171db95a5f355921943af198041e6e"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fccaad289a238d091cdda7326e98fec7e8ee40af3b46712448e4df752b46a71"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef658716d66b93c1aae90c7058a9e56606b0bedc7df794bb4300cfebff0c33cb"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/780c55e01dcf28696b18c6660e3db6048ca6ea463b686287fe59416f08624029"} {"level":"info","ts":"2026-07-12T00:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0d9e0415d00ffe44d026cde86f21b7be499986cb27ac6f73d051edb51d5ee04"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521"} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"debug","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577"} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd"} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04"} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"error","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"error","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"error","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04"} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134"} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:41:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:41:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:41:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:41:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd"} {"level":"debug","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180"} {"level":"info","ts":"2026-07-12T00:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db0d9636-b842-4769-b4da-97e805a104e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60550","PortSpecifier":{"PortValue":60550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db0d9636-b842-4769-b4da-97e805a104e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db0d9636-b842-4769-b4da-97e805a104e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60550","PortSpecifier":{"PortValue":60550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816878,"nanos":532041450},"http":{"id":"db0d9636-b842-4769-b4da-97e805a104e4","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db0d9636-b842-4769-b4da-97e805a104e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db0d9636-b842-4769-b4da-97e805a104e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/sub-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db0d9636-b842-4769-b4da-97e805a104e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db0d9636-b842-4769-b4da-97e805a104e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db0d9636-b842-4769-b4da-97e805a104e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a840614-a775-4db9-b287-fab108e9eae0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56754","PortSpecifier":{"PortValue":56754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a840614-a775-4db9-b287-fab108e9eae0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a840614-a775-4db9-b287-fab108e9eae0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56754","PortSpecifier":{"PortValue":56754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816878,"nanos":578012340},"http":{"id":"5a840614-a775-4db9-b287-fab108e9eae0","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a840614-a775-4db9-b287-fab108e9eae0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a840614-a775-4db9-b287-fab108e9eae0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/sub-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a840614-a775-4db9-b287-fab108e9eae0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a840614-a775-4db9-b287-fab108e9eae0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a840614-a775-4db9-b287-fab108e9eae0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60560","PortSpecifier":{"PortValue":60560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60560","PortSpecifier":{"PortValue":60560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816878,"nanos":615198855},"http":{"id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","method":"GET","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kovr8KJe3tLJEI1p_r2OgFZLPCgLBNNmO8oL4D9LDUg1jk7Axn3x90RAqXHA"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kovr8KJe3tLJEI1p_r2OgFZLPCgLBNNmO8oL4D9LDUg1jk7Axn3x90RAqXHA\"}"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"564249e2-9e45-45f2-9f6a-64a58676753a","keyName":"e2e-sub-iso-9f2da8","subscription":"e2e-a-only-114c7f","tenant":"e2e-shared-a-45be6f","userId":"564249e2-9e45-45f2-9f6a-64a58676753a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/sub-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-114c7f"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ea8b0df-4ea8-48cc-9f9f-14c01bbec7e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56760","PortSpecifier":{"PortValue":56760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56760","PortSpecifier":{"PortValue":56760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816878,"nanos":671881795},"http":{"id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","method":"GET","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4kiLAYNwV6DpGMPw_hZocsstglN8hmMyc7GTxtoueXvzS4wTEVgaFvs4lyry"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4kiLAYNwV6DpGMPw_hZocsstglN8hmMyc7GTxtoueXvzS4wTEVgaFvs4lyry\"}"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"803415a0-a7d6-4313-9a73-8a115913c3f0","keyName":"e2e-sub-iso-191a6f","subscription":"e2e-b-only-114c7f","tenant":"e2e-shared-b-39949b","userId":"803415a0-a7d6-4313-9a73-8a115913c3f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/sub-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-114c7f"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9afb3fd5-074c-4e53-8a7d-33c788fc9d3d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53812","PortSpecifier":{"PortValue":53812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53812","PortSpecifier":{"PortValue":53812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816897,"nanos":555828794},"http":{"id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/sub-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f9bec2-ba00-40d3-9bf9-af01f70b80b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33162","PortSpecifier":{"PortValue":33162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33162","PortSpecifier":{"PortValue":33162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816897,"nanos":604334106},"http":{"id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/sub-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"160e2cfb-4e7f-4e30-a4a5-433aab0d913d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53814","PortSpecifier":{"PortValue":53814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e41e025-1cde-42c1-91f0-a43250459ac6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53814","PortSpecifier":{"PortValue":53814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816897,"nanos":643300080},"http":{"id":"9e41e025-1cde-42c1-91f0-a43250459ac6","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gDXKZouBZnnpDCl9_1CjVsjlQ8FYjHM36a0HbUw0AVHPp5dZGTnkQrJzRTMQ"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gDXKZouBZnnpDCl9_1CjVsjlQ8FYjHM36a0HbUw0AVHPp5dZGTnkQrJzRTMQ\"}"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"155c60b3-d0e9-4ba0-a61c-0c69b839ca46","keyName":"e2e-sub-iso-35c2f4","subscription":"e2e-shared-sub-8e4c0f","tenant":"e2e-shared-a-45be6f","userId":"155c60b3-d0e9-4ba0-a61c-0c69b839ca46","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/sub-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8e4c0f"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e41e025-1cde-42c1-91f0-a43250459ac6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee5f723-df12-460e-9049-c701fbe98198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33176","PortSpecifier":{"PortValue":33176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bee5f723-df12-460e-9049-c701fbe98198","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee5f723-df12-460e-9049-c701fbe98198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33176","PortSpecifier":{"PortValue":33176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816897,"nanos":676263352},"http":{"id":"bee5f723-df12-460e-9049-c701fbe98198","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11UU8a9ogl3gjXdGD_IW4jtjavTMA3CE4HTF4SK8hWxILNSD007KIGmHmFQvk"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11UU8a9ogl3gjXdGD_IW4jtjavTMA3CE4HTF4SK8hWxILNSD007KIGmHmFQvk\"}"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"310638ae-9aeb-4a37-9202-67e7f44dadd5","keyName":"e2e-sub-iso-dc9aea","subscription":"e2e-shared-sub-8e4c0f","tenant":"e2e-shared-b-39949b","userId":"310638ae-9aeb-4a37-9202-67e7f44dadd5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bee5f723-df12-460e-9049-c701fbe98198","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/sub-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8e4c0f"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee5f723-df12-460e-9049-c701fbe98198","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee5f723-df12-460e-9049-c701fbe98198","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:41:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee5f723-df12-460e-9049-c701fbe98198","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b0c36aa05d613f333c0ce7f28320f995d4a6d5886fd95cec5b5f9a467f209af"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18791a7a7f6953a4fc4bcc971bcad1649c271c1e75f3679bd4c0d2aeecd65954"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63f4db686ec378dc706c6dded557626ace6cae219c097a8b826ae4914dcd8482"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d62ebfa6212f5004db7139da891837a7de586a3ae9e0c5f645311cc6825207c"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/327ec2a88db308ae76eff1ecccd1620a6f98db91feabe3a34fd90db2037a7581"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7fef7006e94de54fb048a9691fd0b65de716c19b9182da288564d763c940604"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a2dd51b71ca4dca9c5a29035484ccbe740f6be7eea8358653a1a10910b93a04"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7620490255e4bfe9daa34ce7d1f54ab7d214f4079664a363fa599b6df288fd"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e59cf222e5989461eb269f835348366ee601a6de8b2016ad99e98d6cf3f9886"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0d1b84fc234040a68603f7cb397ece2029d01ffb6c3b78a779cd8f194a6a521"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/630325b5c673ff483b15bfad8e016168495e1074aa0648ec17745aeb87fb5202"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bd2b89f40f3ab3df18b08829f7d8a8dffb0570b0dbe31317e773c0c8c728577"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b8fc57cd89b9a0f8be31478048fac8accd17621356f0af42d38a77fa066b5e7"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68df5070883415234dcd0d8dce1c386ba8fc50f48e1ae24e831d6e3e86174134"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/125e283c047fa4c4306152098f88b1bafcc43b196361d2a9efba5bd04eea968e"} {"level":"info","ts":"2026-07-12T00:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32b6395c7caa6ff307681ede8265607caaed2c9ef69aa0971dae2ca502deb0bf"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"} {"level":"error","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920"} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920"} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920"} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920"} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364"} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T00:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb"} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d"} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6"} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"info","ts":"2026-07-12T00:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40348","PortSpecifier":{"PortValue":40348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40348","PortSpecifier":{"PortValue":40348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816999,"nanos":483935965},"http":{"id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e2ac524-7634-43ff-926a-e3cb5f5a281a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36220","PortSpecifier":{"PortValue":36220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36220","PortSpecifier":{"PortValue":36220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816999,"nanos":531041368},"http":{"id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaff8d0f-ff25-4471-9538-6482bbc1b924","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40354","PortSpecifier":{"PortValue":40354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b454479b-f315-46d7-9cbd-b282e739ae7c","method":"POST","path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40354","PortSpecifier":{"PortValue":40354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783816999,"nanos":572437866},"http":{"id":"b454479b-f315-46d7-9cbd-b282e739ae7c","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11DyoQpQH65JS6aS2_o057CIdNi5843OZdw5a32JRmxkal8vFtDUdG4cPheR6"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11DyoQpQH65JS6aS2_o057CIdNi5843OZdw5a32JRmxkal8vFtDUdG4cPheR6\"}"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e77e5877-e074-46a8-b67f-2939f786acd8","keyName":"e2e-rate-a-21717f","subscription":"e2e-rate-iso-a-21717f","tenant":"e2e-shared-a-45be6f","userId":"e77e5877-e074-46a8-b67f-2939f786acd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\",\"requestedSubscription\":\"e2e-rate-iso-a-21717f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21717f","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21717f"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e77e5877-e074-46a8-b67f-2939f786acd8","keyName":"e2e-rate-a-21717f","selected_subscription":"e2e-rate-iso-a-21717f","selected_subscription_key":"ai-tenant-e2e-shared-a-45be6f/e2e-rate-iso-a-21717f@ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21717f","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b454479b-f315-46d7-9cbd-b282e739ae7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57026","PortSpecifier":{"PortValue":57026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","method":"POST","path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57026","PortSpecifier":{"PortValue":57026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817000,"nanos":635778153},"http":{"id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11DyoQpQH65JS6aS2_o057CIdNi5843OZdw5a32JRmxkal8vFtDUdG4cPheR6"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11DyoQpQH65JS6aS2_o057CIdNi5843OZdw5a32JRmxkal8vFtDUdG4cPheR6\"}"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e77e5877-e074-46a8-b67f-2939f786acd8","keyName":"e2e-rate-a-21717f","subscription":"e2e-rate-iso-a-21717f","tenant":"e2e-shared-a-45be6f","userId":"e77e5877-e074-46a8-b67f-2939f786acd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\",\"requestedSubscription\":\"e2e-rate-iso-a-21717f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21717f","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21717f"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e77e5877-e074-46a8-b67f-2939f786acd8","keyName":"e2e-rate-a-21717f","selected_subscription":"e2e-rate-iso-a-21717f","selected_subscription_key":"ai-tenant-e2e-shared-a-45be6f/e2e-rate-iso-a-21717f@ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21717f","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08dcf4c8-9910-4119-b6e5-46fc6abb625c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","method":"POST","path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817001,"nanos":696867908},"http":{"id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11DyoQpQH65JS6aS2_o057CIdNi5843OZdw5a32JRmxkal8vFtDUdG4cPheR6"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11DyoQpQH65JS6aS2_o057CIdNi5843OZdw5a32JRmxkal8vFtDUdG4cPheR6\"}"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e77e5877-e074-46a8-b67f-2939f786acd8","keyName":"e2e-rate-a-21717f","subscription":"e2e-rate-iso-a-21717f","tenant":"e2e-shared-a-45be6f","userId":"e77e5877-e074-46a8-b67f-2939f786acd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\",\"requestedSubscription\":\"e2e-rate-iso-a-21717f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21717f","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21717f"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e77e5877-e074-46a8-b67f-2939f786acd8","keyName":"e2e-rate-a-21717f","selected_subscription":"e2e-rate-iso-a-21717f","selected_subscription_key":"ai-tenant-e2e-shared-a-45be6f/e2e-rate-iso-a-21717f@ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21717f","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f48978f-0788-4c5a-8c6a-6f5adfa2f5b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58830","PortSpecifier":{"PortValue":58830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c7b26b8-b379-40b0-bff0-50061a88d548","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58830","PortSpecifier":{"PortValue":58830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817014,"nanos":747015603},"http":{"id":"2c7b26b8-b379-40b0-bff0-50061a88d548","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c7b26b8-b379-40b0-bff0-50061a88d548","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57218","PortSpecifier":{"PortValue":57218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57218","PortSpecifier":{"PortValue":57218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817014,"nanos":797883052},"http":{"id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"]}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/204bb190fb4a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5509892e-678d-4cac-addc-7a5b694990ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"24ca9e8e-1121-43a7-9d4c-65e8b4a0a3c6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70d01354-f7fa-479b-8f6b-d6336c962bb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58838","PortSpecifier":{"PortValue":58838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","method":"POST","path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58838","PortSpecifier":{"PortValue":58838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817014,"nanos":844549633},"http":{"id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FbC7WvjB1F4oln6A_unb5Sv4CkWm8pc3IsssfGgR7x4L6KXV4CIBbLGAX0Kg"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FbC7WvjB1F4oln6A_unb5Sv4CkWm8pc3IsssfGgR7x4L6KXV4CIBbLGAX0Kg\"}"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed657183-19e3-4372-aeaf-965bcc362228","keyName":"e2e-rate-a-c2ff8e","subscription":"e2e-rate-iso-a-c2ff8e","tenant":"e2e-shared-a-45be6f","userId":"ed657183-19e3-4372-aeaf-965bcc362228","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\",\"requestedSubscription\":\"e2e-rate-iso-a-c2ff8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2ff8e","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2ff8e"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed657183-19e3-4372-aeaf-965bcc362228","keyName":"e2e-rate-a-c2ff8e","selected_subscription":"e2e-rate-iso-a-c2ff8e","selected_subscription_key":"ai-tenant-e2e-shared-a-45be6f/e2e-rate-iso-a-c2ff8e@ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2ff8e","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f3ee9b3-188e-4cac-9a3c-92716b2a4157","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1951a8f3-3a25-413c-b366-569832affdae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58840","PortSpecifier":{"PortValue":58840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1951a8f3-3a25-413c-b366-569832affdae","method":"POST","path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1951a8f3-3a25-413c-b366-569832affdae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58840","PortSpecifier":{"PortValue":58840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817015,"nanos":889484445},"http":{"id":"1951a8f3-3a25-413c-b366-569832affdae","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FbC7WvjB1F4oln6A_unb5Sv4CkWm8pc3IsssfGgR7x4L6KXV4CIBbLGAX0Kg"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FbC7WvjB1F4oln6A_unb5Sv4CkWm8pc3IsssfGgR7x4L6KXV4CIBbLGAX0Kg\"}"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed657183-19e3-4372-aeaf-965bcc362228","keyName":"e2e-rate-a-c2ff8e","subscription":"e2e-rate-iso-a-c2ff8e","tenant":"e2e-shared-a-45be6f","userId":"ed657183-19e3-4372-aeaf-965bcc362228","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\",\"requestedSubscription\":\"e2e-rate-iso-a-c2ff8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2ff8e","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1951a8f3-3a25-413c-b366-569832affdae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2ff8e"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1951a8f3-3a25-413c-b366-569832affdae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed657183-19e3-4372-aeaf-965bcc362228","keyName":"e2e-rate-a-c2ff8e","selected_subscription":"e2e-rate-iso-a-c2ff8e","selected_subscription_key":"ai-tenant-e2e-shared-a-45be6f/e2e-rate-iso-a-c2ff8e@ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2ff8e","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1951a8f3-3a25-413c-b366-569832affdae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1951a8f3-3a25-413c-b366-569832affdae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58856","PortSpecifier":{"PortValue":58856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","method":"POST","path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions","host":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58856","PortSpecifier":{"PortValue":58856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817016,"nanos":931251953},"http":{"id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","method":"POST","headers":{":authority":"e2e-shared-a-45be6f.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FbC7WvjB1F4oln6A_unb5Sv4CkWm8pc3IsssfGgR7x4L6KXV4CIBbLGAX0Kg"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FbC7WvjB1F4oln6A_unb5Sv4CkWm8pc3IsssfGgR7x4L6KXV4CIBbLGAX0Kg\"}"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed657183-19e3-4372-aeaf-965bcc362228","keyName":"e2e-rate-a-c2ff8e","subscription":"e2e-rate-iso-a-c2ff8e","tenant":"e2e-shared-a-45be6f","userId":"ed657183-19e3-4372-aeaf-965bcc362228","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\",\"requestedSubscription\":\"e2e-rate-iso-a-c2ff8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45be6f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2ff8e","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2ff8e"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed657183-19e3-4372-aeaf-965bcc362228","keyName":"e2e-rate-a-c2ff8e","selected_subscription":"e2e-rate-iso-a-c2ff8e","selected_subscription_key":"ai-tenant-e2e-shared-a-45be6f/e2e-rate-iso-a-c2ff8e@ai-tenant-e2e-shared-a-45be6f/rate-test-model-45be6f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45be6f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2ff8e","namespace":"ai-tenant-e2e-shared-a-45be6f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bca3c5ea-6c9e-4a4f-9829-4a67bbbcc4da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57234","PortSpecifier":{"PortValue":57234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eefae78-b32a-4258-960f-93bd7ff80120","method":"POST","path":"/ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b/v1/completions","host":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57234","PortSpecifier":{"PortValue":57234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783817016,"nanos":970518450},"http":{"id":"4eefae78-b32a-4258-960f-93bd7ff80120","method":"POST","headers":{":authority":"e2e-shared-b-39949b.apps.68206b99-b6d6-4c29-bb01-204bb190fb4a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CzCIvLckH2ilR8F_vHSZ0UYgThZXjUbegcjj9qzpOABzJnEpslPLzaUHHAf"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CzCIvLckH2ilR8F_vHSZ0UYgThZXjUbegcjj9qzpOABzJnEpslPLzaUHHAf\"}"} {"level":"debug","ts":"2026-07-12T00:43:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91b5be40-3022-4ebb-a8c5-fcfd22e3e2d4","keyName":"e2e-rate-b-c2ff8e","subscription":"e2e-rate-iso-b-c2ff8e","tenant":"e2e-shared-b-39949b","userId":"91b5be40-3022-4ebb-a8c5-fcfd22e3e2d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b\",\"requestedSubscription\":\"e2e-rate-iso-b-c2ff8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-39949b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-39949b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c2ff8e","namespace":"ai-tenant-e2e-shared-b-39949b","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c2ff8e"} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91b5be40-3022-4ebb-a8c5-fcfd22e3e2d4","keyName":"e2e-rate-b-c2ff8e","selected_subscription":"e2e-rate-iso-b-c2ff8e","selected_subscription_key":"ai-tenant-e2e-shared-b-39949b/e2e-rate-iso-b-c2ff8e@ai-tenant-e2e-shared-b-39949b/rate-test-model-39949b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-39949b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c2ff8e","namespace":"ai-tenant-e2e-shared-b-39949b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-12T00:43:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eefae78-b32a-4258-960f-93bd7ff80120","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea5a36ced6e44fc2a28906c5d90cd97cf938d1952d75637afaa3f8f9c7020920"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/197de21e990a1498cca3826bc22cdb6ee98aeba8bb355f01c48baded21c90862"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75e4e37f5afb3762d88bfb7d26fde1b5e1e49a43ecfb20cf9fbd62a1b4f3912a"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c91833de07c113c302ea3fdaff1295a81f4ada2fc7d7bed8175d77087530cca"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/755834ad091a7d42dae858da6064fb37cc56a45f5e9189be0dc6f9467d1ee86a"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a43b1c1a36d88c103d8b27e09aa2b628e6314e03a865494bd069446d544312d"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec46aa6cc7640331c7969569bc5aa1a934010cc9e41866d12d9bd5fabdcf63a7"} {"level":"info","ts":"2026-07-12T00:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70b376deab3af9f2bf74aad7939478c99c156e260586fd333eee261afeeeaf1c"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c21b2c8de7fb6d04968483a9f632faf34f687cc44e0f006bb962f2d9e1be2364"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a40e7c6d5959783d9f68aa322ec1e88edf1e0578d8db1d5986e914ec29782d44"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc9f0e5298f7fe147832ebfc0f8cd085b61b77ee03f681a7e00a664bc3cb14ee"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f31c062754e2de69becd3f280bd8893cf86d160ddb6f07ec4f7b851086ff0553"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c543d76d1e5927f54c996315a81a6f8b07c758059b773c495eab009eee27cf85"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9990624a872cf2fd0975423fd72f68ea9fc678430aee7ab05e22b193d5c16558"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837b65923f051048ef0b64b9ebd84060676b0b7c88965544927e845ab39c68f6"} {"level":"info","ts":"2026-07-12T00:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1afa7b4cd71ac58740bc0d202cc0b630ffc641a547b1a280a40ba277cd8ec7a2"} {"level":"info","ts":"2026-07-12T00:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c4e582679c89c5159c145298daab2a4394c40f29bbae57fa3a3772057504ba6"} {"level":"info","ts":"2026-07-12T00:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de8604aefb73d5225e8e3da61a67cf46ba326768956edbd790a03050a0ebaccb"} {"level":"info","ts":"2026-07-12T00:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aad86309e8de086cc5a940ebd35ad3e18c34545167d09a4d18682aab89a24fb2"} {"level":"info","ts":"2026-07-12T00:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae405b00696a08616ea18948508d37c07a0119c3eae58e87641969e5f6fd78f"} {"level":"info","ts":"2026-07-12T00:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/706d55d3d0c62a9711a55ff872080cfb3d64c01add7fb3ed9811cd4606fae32f"} {"level":"info","ts":"2026-07-12T00:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4afe5dfabca49afbb6551f7717e9a07a084b08e31a0644a53abc4bd01b90bac8"} {"level":"info","ts":"2026-07-12T00:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3654fca9b44d8c4dfba01b7f9dd41677459bc60772a5724438c8c61487e4340"} {"level":"info","ts":"2026-07-12T00:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ffba921662b29f01024f5ad3803be7ce5d552a063b958616f5011452307180"}