--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115"} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9"} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a10bdfba67c778cec08b604a1238c4f6ec3858f87b4bfda7c644abadd2a36f18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a10bdfba67c778cec08b604a1238c4f6ec3858f87b4bfda7c644abadd2a36f18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a10bdfba67c778cec08b604a1238c4f6ec3858f87b4bfda7c644abadd2a36f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"info","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a10bdfba67c778cec08b604a1238c4f6ec3858f87b4bfda7c644abadd2a36f18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a10bdfba67c778cec08b604a1238c4f6ec3858f87b4bfda7c644abadd2a36f18"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"} {"level":"info","ts":"2026-07-16T09:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"} {"level":"error","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f"} {"level":"error","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46678","PortSpecifier":{"PortValue":46678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46678","PortSpecifier":{"PortValue":46678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194255,"nanos":403718113},"http":{"id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"396a0ef0-b1e8-4917-aec3-16fbafa937cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45188","PortSpecifier":{"PortValue":45188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45188","PortSpecifier":{"PortValue":45188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194255,"nanos":459468253},"http":{"id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5043d9da-2a1e-45b5-8ce7-b95110b96cea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46690","PortSpecifier":{"PortValue":46690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","method":"GET","path":"/maas-api/v1/api-keys/8b419b5c-3092-40ff-bf1a-f203273280a3","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46690","PortSpecifier":{"PortValue":46690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194255,"nanos":513925361},"http":{"id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","method":"GET","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b419b5c-3092-40ff-bf1a-f203273280a3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b419b5c-3092-40ff-bf1a-f203273280a3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8688dbe-24df-45da-8b8c-0bb4568abb2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45202","PortSpecifier":{"PortValue":45202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","method":"GET","path":"/maas-api/v1/api-keys/db6634c3-06ef-4ce6-ab42-92538616f423","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45202","PortSpecifier":{"PortValue":45202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194255,"nanos":550713785},"http":{"id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","method":"GET","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/db6634c3-06ef-4ce6-ab42-92538616f423",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/db6634c3-06ef-4ce6-ab42-92538616f423",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f13892-5bf8-4c63-8cc4-bf86c0ba4329","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43320","PortSpecifier":{"PortValue":43320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43320","PortSpecifier":{"PortValue":43320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194272,"nanos":855227132},"http":{"id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e7f710c-0ae8-45df-bea1-b4835a185c43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53436","PortSpecifier":{"PortValue":53436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194272,"nanos":892133354},"http":{"id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d459f44-c56d-4f94-984f-aa9af07eaf05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43324","PortSpecifier":{"PortValue":43324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43324","PortSpecifier":{"PortValue":43324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194272,"nanos":932311760},"http":{"id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","method":"GET","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xl08ZL5JnPksT7t4_8wJMG152aXtjJgJnzdrB4aVcpCcjPlD4Z4blAWPKu7b"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xl08ZL5JnPksT7t4_8wJMG152aXtjJgJnzdrB4aVcpCcjPlD4Z4blAWPKu7b\"}"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dabe09f2-0cab-412f-ba34-4db3eb187765","keyName":"e2e-auth-iso-a-b09cc9","subscription":"e2e-auth-iso-76dfdd","tenant":"e2e-shared-a-923c3a","userId":"dabe09f2-0cab-412f-ba34-4db3eb187765","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-76dfdd"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff3e765f-9d31-4f87-bfb6-0b55ac82246b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194295,"nanos":360839477},"http":{"id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9fcfa0f-721d-42cd-9e57-2223fa7a9e2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38050","PortSpecifier":{"PortValue":38050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38050","PortSpecifier":{"PortValue":38050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194295,"nanos":398576139},"http":{"id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a07d5ad-16ad-4924-a22e-d58a93b432da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38056","PortSpecifier":{"PortValue":38056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1633f13a-4be4-415c-85fb-d45791f7dd45","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38056","PortSpecifier":{"PortValue":38056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194295,"nanos":434578971},"http":{"id":"1633f13a-4be4-415c-85fb-d45791f7dd45","method":"GET","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17Jlyfiyp0nR6J8a_iARMYt9O20QHoONzoHhj96PbBUw4MQbJYSfo4z1jl48"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17Jlyfiyp0nR6J8a_iARMYt9O20QHoONzoHhj96PbBUw4MQbJYSfo4z1jl48\"}"} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T09:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1633f13a-4be4-415c-85fb-d45791f7dd45","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39252","PortSpecifier":{"PortValue":39252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39252","PortSpecifier":{"PortValue":39252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194310,"nanos":587288071},"http":{"id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"306f1daf-82d6-4e3f-a01d-8bf368bdae37","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194310,"nanos":633719579},"http":{"id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5005ca90-b58c-45cd-adb8-a03c78ce0d3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39266","PortSpecifier":{"PortValue":39266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32db3820-c260-4084-b786-e5cf0bb8623a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39266","PortSpecifier":{"PortValue":39266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194310,"nanos":671483088},"http":{"id":"32db3820-c260-4084-b786-e5cf0bb8623a","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32db3820-c260-4084-b786-e5cf0bb8623a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49306","PortSpecifier":{"PortValue":49306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49306","PortSpecifier":{"PortValue":49306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194310,"nanos":708118559},"http":{"id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:31:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24b90f88-0100-406f-bded-ccd9d6abf1e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194325,"nanos":924601059},"http":{"id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23f9172d-c3c9-4242-a68d-83de0c4afecb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60166","PortSpecifier":{"PortValue":60166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60166","PortSpecifier":{"PortValue":60166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194325,"nanos":964184633},"http":{"id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1959a4ed-bc07-4058-b54c-6a85b4754f0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60170","PortSpecifier":{"PortValue":60170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","method":"GET","path":"/maas-api/v1/api-keys/132476e7-af66-44dd-ba80-013a3dca9fbd","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60170","PortSpecifier":{"PortValue":60170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194325,"nanos":999083969},"http":{"id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","method":"GET","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/132476e7-af66-44dd-ba80-013a3dca9fbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/132476e7-af66-44dd-ba80-013a3dca9fbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c33c4b29-3073-41d7-a2b3-07d1fdb16d2d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","method":"GET","path":"/maas-api/v1/api-keys/132476e7-af66-44dd-ba80-013a3dca9fbd","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194326,"nanos":30964139},"http":{"id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","method":"GET","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/132476e7-af66-44dd-ba80-013a3dca9fbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/132476e7-af66-44dd-ba80-013a3dca9fbd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ccda463-0b0e-48b4-9b21-056ef9e129b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33424","PortSpecifier":{"PortValue":33424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83141bca-f2ea-4256-8dad-767bd3dee02f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33424","PortSpecifier":{"PortValue":33424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194343,"nanos":341620830},"http":{"id":"83141bca-f2ea-4256-8dad-767bd3dee02f","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83141bca-f2ea-4256-8dad-767bd3dee02f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194343,"nanos":379000897},"http":{"id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/auth-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7578a19-9d3c-4734-9ed4-459da9a321ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaea18a4-873e-470f-9320-920195f5bc87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33430","PortSpecifier":{"PortValue":33430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaea18a4-873e-470f-9320-920195f5bc87","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaea18a4-873e-470f-9320-920195f5bc87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33430","PortSpecifier":{"PortValue":33430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194343,"nanos":415956021},"http":{"id":"aaea18a4-873e-470f-9320-920195f5bc87","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fyxntSpgfyMYSzUT_5zZAKkTb05o7SNO514qv3Te8gOeSur4HAAMztzQV7dG"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fyxntSpgfyMYSzUT_5zZAKkTb05o7SNO514qv3Te8gOeSur4HAAMztzQV7dG\"}"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cacb57e1-42cf-4e88-9c95-443dd19f2306","keyName":"e2e-auth-iso-a-1de81e","subscription":"e2e-auth-iso-c66455","tenant":"e2e-shared-a-923c3a","userId":"cacb57e1-42cf-4e88-9c95-443dd19f2306","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaea18a4-873e-470f-9320-920195f5bc87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/auth-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c66455"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaea18a4-873e-470f-9320-920195f5bc87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaea18a4-873e-470f-9320-920195f5bc87","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaea18a4-873e-470f-9320-920195f5bc87","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c24d38364a6fe2f1d0e6b8eceac378f51a960b414e8c166774bf5cb7c7cf744"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e46ab5f0df7d457282631eb6df87fb94e09e3879955945f7092de596345f851a"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a640f797f699a52e3233eaf7621946bcd1454e218b9213e4fe1bb4d9778c629"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be3a81c486cd308d9ac6a95a0749f5fb7767447baf335b1ceaa85b5519b9115"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cf0e4cf9b8e8ee60928e0f06aa5eb156c0bc3b0e7cee3a371175a14aa880231"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17ebac70c53bbe5abb8641f816539c548dacc93c0d4abb1f8ddbe1efd1bd6c5f"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6a3df0f3da20862e15cd406513804a5900b0738dbd3542314a85d7d1ceedc5f"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1247112ec7cfdabfb0576f32bc8743594344f33dd6679d58ab79875f9393fa9"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae072c6250923ae206f9164b0e49377fa7ca758edef0dadc8830db49632d67e"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd5ce02b9069a74e407ed0605d949a9c7f03a27cea464f64571f6956ed444a64"} {"level":"info","ts":"2026-07-16T09:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fac555a36ac18896fbbee526a2384f79a08ea78ca46d508c3f04c0193c0f7193"} {"level":"info","ts":"2026-07-16T09:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a10bdfba67c778cec08b604a1238c4f6ec3858f87b4bfda7c644abadd2a36f18"} {"level":"info","ts":"2026-07-16T09:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e9db874a010a12ae9699e80afd8b6c95a69cd71a6f959b8c88f4c1c0c54119"} {"level":"info","ts":"2026-07-16T09:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/920f2ac12839c60981a3cb216dc537ece9ec4df1cd4df54046861dc8dc0267fa"} {"level":"info","ts":"2026-07-16T09:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8b36100d1a2e391b99a3e0bc34878b74bbbecdd445c54315a339b3b459ba19e"} {"level":"info","ts":"2026-07-16T09:32:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef9e1f76dacca665cb4bb1365813994586b3eaaf25a17a4bd7e497bebea02766"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"error","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:32:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:32:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068"} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"} {"level":"info","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a"} {"level":"error","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6"} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6"} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50022735037d5d25509a10efafe614d9f59ec332d3864200490e99e1a66ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50022735037d5d25509a10efafe614d9f59ec332d3864200490e99e1a66ac65"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:33:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"info","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068"} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"debug","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"info","ts":"2026-07-16T09:33:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194421,"nanos":688405423},"http":{"id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/sub-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19f7d616-c8ea-4f29-aa87-3a5211c9b501","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54108","PortSpecifier":{"PortValue":54108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54108","PortSpecifier":{"PortValue":54108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194421,"nanos":731228830},"http":{"id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/sub-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc48ad4f-df7c-493f-a3e7-cacd0f620520","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51918","PortSpecifier":{"PortValue":51918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51918","PortSpecifier":{"PortValue":51918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194421,"nanos":773874560},"http":{"id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","method":"GET","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Z926YIusDjfUwEQs_lpavgVOtavolTWU6dARVYvuwCNroB8XkifRF5KvzGoF"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Z926YIusDjfUwEQs_lpavgVOtavolTWU6dARVYvuwCNroB8XkifRF5KvzGoF\"}"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2e4eb6b6-b899-45eb-82c8-4efd2d2f7688","keyName":"e2e-sub-iso-c3f9cc","subscription":"e2e-a-only-a9dd58","tenant":"e2e-shared-a-923c3a","userId":"2e4eb6b6-b899-45eb-82c8-4efd2d2f7688","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/sub-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a9dd58"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee9735c-7783-4add-82fd-4ae9b322a9b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54110","PortSpecifier":{"PortValue":54110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b68d160b-fe20-4f06-b365-0a32f4081da7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54110","PortSpecifier":{"PortValue":54110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194421,"nanos":818628760},"http":{"id":"b68d160b-fe20-4f06-b365-0a32f4081da7","method":"GET","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jdD6vSpCDwIj53u5_ZFUUALClVwYQtb5AXBeeIo40ggtpRM5PZRovpFJWORT"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jdD6vSpCDwIj53u5_ZFUUALClVwYQtb5AXBeeIo40ggtpRM5PZRovpFJWORT\"}"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"340cc681-dcae-4709-b2ed-5c02915a2439","keyName":"e2e-sub-iso-de9d34","subscription":"e2e-b-only-a9dd58","tenant":"e2e-shared-b-800be8","userId":"340cc681-dcae-4709-b2ed-5c02915a2439","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/sub-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a9dd58"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b68d160b-fe20-4f06-b365-0a32f4081da7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51010","PortSpecifier":{"PortValue":51010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51010","PortSpecifier":{"PortValue":51010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194429,"nanos":954952607},"http":{"id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/sub-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffa47336-3f8f-4473-9d21-9bfae66494f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d04a454-fa5a-4d97-9126-09484aec84dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52476","PortSpecifier":{"PortValue":52476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194429,"nanos":991577567},"http":{"id":"4d04a454-fa5a-4d97-9126-09484aec84dc","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/sub-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d04a454-fa5a-4d97-9126-09484aec84dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31664574-87f9-4611-b560-cb6c67c37d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51012","PortSpecifier":{"PortValue":51012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31664574-87f9-4611-b560-cb6c67c37d36","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31664574-87f9-4611-b560-cb6c67c37d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51012","PortSpecifier":{"PortValue":51012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194430,"nanos":28840802},"http":{"id":"31664574-87f9-4611-b560-cb6c67c37d36","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RkccGEyq0byvIyuw_Rz1Go2X54DHS9Dsjl9gD0SGQEvWiJBaAePrB9TEK1SA"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RkccGEyq0byvIyuw_Rz1Go2X54DHS9Dsjl9gD0SGQEvWiJBaAePrB9TEK1SA\"}"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82fd3f43-1b0d-46af-986a-34b3a96e6995","keyName":"e2e-sub-iso-6e1ea4","subscription":"e2e-shared-sub-ca504d","tenant":"e2e-shared-a-923c3a","userId":"82fd3f43-1b0d-46af-986a-34b3a96e6995","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31664574-87f9-4611-b560-cb6c67c37d36","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/sub-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ca504d"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31664574-87f9-4611-b560-cb6c67c37d36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31664574-87f9-4611-b560-cb6c67c37d36","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31664574-87f9-4611-b560-cb6c67c37d36","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52482","PortSpecifier":{"PortValue":52482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52482","PortSpecifier":{"PortValue":52482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194430,"nanos":60391655},"http":{"id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WhVYb9QaXgYlWDgz_94vhy40ryWuZX9hVt8ZaxwtJfWgmWnpv86eizwt7wQS"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WhVYb9QaXgYlWDgz_94vhy40ryWuZX9hVt8ZaxwtJfWgmWnpv86eizwt7wQS\"}"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2181c78-fe99-41c3-a0ea-db3ee54f04d6","keyName":"e2e-sub-iso-fcf0dd","subscription":"e2e-shared-sub-ca504d","tenant":"e2e-shared-b-800be8","userId":"d2181c78-fe99-41c3-a0ea-db3ee54f04d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/sub-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ca504d"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:33:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfdeb86c-d24d-4cc4-9873-5c48405f7a1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e73ca218410f9021591398257cef3a09e8915f4a974888e5a01a3340e65a75a"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c46a1e007b0b97bb062731aabc07f05a69ef02b173464e0528280379d2546dc"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4df63f88ed4b8b9ccc283fb505fd3a83e6ba62ff1de70ebb65f2a0b2c42ce624"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2034846b92e05ac5ff1fe2b1c0c4ba61ff621323be1905fe381ec8783b179068"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d01a7b5d34f83a3e22298a4f8262e53a272801ce84705bc4823a2cb4a9dcfe0"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8bb0fb8ef09f74bdc8d1f8e387e342194fe40ef4180d6be854c665289c29c65"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c68e6734d9a1155e4375e9dd9da484b7df0637a3695c0a0b7d78c73f1f492ac"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec2ea5b1cf938fd1b8c12a9c11ac2cf19f7a4a6edb68d3cd27d9826723189ba6"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4000f01ad7d5726f67cbcc5cef176949366e9c4f1336d3f38ee29d0a5e3f0409"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/950840d83097a9f92db567b831e660245d77a0749390dd17c37d29e79848efce"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87af925ef874f5e7921fdd542d7eae2679b031367af51da02476836edecb2044"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82d32b795090690960ca55e0c23641053b5f7f42af9345827cd10ba54901f9b1"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f577880af55ce479b65073a72d3b38ce6bbd04e7fbe3f218b529fa3918c7490"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6294356034072aaed5e3ba5811e66ab0da6483762bfd2fde2081ad357a606de8"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12f2cd5bb677a993004015828d355d226454283c0d132b989090115da1218b44"} {"level":"info","ts":"2026-07-16T09:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac05ecdbc35aff79d709c156067567c992250288bb500cd865c4f91c26432fd"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"error","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"} {"level":"info","ts":"2026-07-16T09:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"error","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578"} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f"} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f"} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:34:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:34:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9"} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50022735037d5d25509a10efafe614d9f59ec332d3864200490e99e1a66ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50022735037d5d25509a10efafe614d9f59ec332d3864200490e99e1a66ac65"} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T09:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578"} {"level":"debug","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"info","ts":"2026-07-16T09:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"info","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58086","PortSpecifier":{"PortValue":58086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c331b87c-7186-458a-bc91-7d2c6d80a041","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58086","PortSpecifier":{"PortValue":58086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194511,"nanos":383559997},"http":{"id":"c331b87c-7186-458a-bc91-7d2c6d80a041","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c331b87c-7186-458a-bc91-7d2c6d80a041","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34006","PortSpecifier":{"PortValue":34006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34006","PortSpecifier":{"PortValue":34006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194511,"nanos":435808706},"http":{"id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f42dc5a-0ea4-44b9-ae6a-6ac8445202af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58092","PortSpecifier":{"PortValue":58092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","method":"POST","path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58092","PortSpecifier":{"PortValue":58092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194511,"nanos":484340458},"http":{"id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16dg0Q9IecSLAUvGr_DTMdDmumJMhSecGPkYHSR8zE6OuW6ks4Duzlf7GFIRU"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16dg0Q9IecSLAUvGr_DTMdDmumJMhSecGPkYHSR8zE6OuW6ks4Duzlf7GFIRU\"}"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","keyName":"e2e-rate-a-5368ef","subscription":"e2e-rate-iso-a-5368ef","tenant":"e2e-shared-a-923c3a","userId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\",\"requestedSubscription\":\"e2e-rate-iso-a-5368ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5368ef","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5368ef"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","keyName":"e2e-rate-a-5368ef","selected_subscription":"e2e-rate-iso-a-5368ef","selected_subscription_key":"ai-tenant-e2e-shared-a-923c3a/e2e-rate-iso-a-5368ef@ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5368ef","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd042ce-20f1-4231-ba88-c0a6d190aeb7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c92dac3-4916-4173-96d4-b97b72e9589a","method":"POST","path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194512,"nanos":546283629},"http":{"id":"3c92dac3-4916-4173-96d4-b97b72e9589a","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16dg0Q9IecSLAUvGr_DTMdDmumJMhSecGPkYHSR8zE6OuW6ks4Duzlf7GFIRU"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16dg0Q9IecSLAUvGr_DTMdDmumJMhSecGPkYHSR8zE6OuW6ks4Duzlf7GFIRU\"}"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","keyName":"e2e-rate-a-5368ef","subscription":"e2e-rate-iso-a-5368ef","tenant":"e2e-shared-a-923c3a","userId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\",\"requestedSubscription\":\"e2e-rate-iso-a-5368ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5368ef","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5368ef"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","keyName":"e2e-rate-a-5368ef","selected_subscription":"e2e-rate-iso-a-5368ef","selected_subscription_key":"ai-tenant-e2e-shared-a-923c3a/e2e-rate-iso-a-5368ef@ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5368ef","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c92dac3-4916-4173-96d4-b97b72e9589a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42414","PortSpecifier":{"PortValue":42414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","method":"POST","path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42414","PortSpecifier":{"PortValue":42414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194513,"nanos":587475955},"http":{"id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16dg0Q9IecSLAUvGr_DTMdDmumJMhSecGPkYHSR8zE6OuW6ks4Duzlf7GFIRU"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16dg0Q9IecSLAUvGr_DTMdDmumJMhSecGPkYHSR8zE6OuW6ks4Duzlf7GFIRU\"}"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","keyName":"e2e-rate-a-5368ef","subscription":"e2e-rate-iso-a-5368ef","tenant":"e2e-shared-a-923c3a","userId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\",\"requestedSubscription\":\"e2e-rate-iso-a-5368ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5368ef","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5368ef"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e8d7587-a738-4cac-9f46-4a41b9db0c0e","keyName":"e2e-rate-a-5368ef","selected_subscription":"e2e-rate-iso-a-5368ef","selected_subscription_key":"ai-tenant-e2e-shared-a-923c3a/e2e-rate-iso-a-5368ef@ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5368ef","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e2ff9b-6b19-49b2-983e-91187c1c7aef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34302","PortSpecifier":{"PortValue":34302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34302","PortSpecifier":{"PortValue":34302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194524,"nanos":588570979},"http":{"id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"289b3642-55b6-48cb-b244-bdcaf557d4ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47148","PortSpecifier":{"PortValue":47148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17e4645d-6bf2-4198-8d00-9f3278849a09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47148","PortSpecifier":{"PortValue":47148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194524,"nanos":627618519},"http":{"id":"17e4645d-6bf2-4198-8d00-9f3278849a09","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"]}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/17af5023ed63"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e9dd42-ea69-4778-8f0f-b0ba816038a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9a8bc70f-a2f1-4f00-9e8e-e323df8bf963","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17e4645d-6bf2-4198-8d00-9f3278849a09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34318","PortSpecifier":{"PortValue":34318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d97fb13-8355-4522-a17b-5f8ee474286e","method":"POST","path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34318","PortSpecifier":{"PortValue":34318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194524,"nanos":667427163},"http":{"id":"0d97fb13-8355-4522-a17b-5f8ee474286e","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SX91IMNoBhndGyNh_5djDnQGjCNOm5zDiwsOzW9dysyk2niahxUflrUbe4OU"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SX91IMNoBhndGyNh_5djDnQGjCNOm5zDiwsOzW9dysyk2niahxUflrUbe4OU\"}"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","keyName":"e2e-rate-a-8a0eb0","subscription":"e2e-rate-iso-a-8a0eb0","tenant":"e2e-shared-a-923c3a","userId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a0eb0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0eb0","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a0eb0"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","keyName":"e2e-rate-a-8a0eb0","selected_subscription":"e2e-rate-iso-a-8a0eb0","selected_subscription_key":"ai-tenant-e2e-shared-a-923c3a/e2e-rate-iso-a-8a0eb0@ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0eb0","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d97fb13-8355-4522-a17b-5f8ee474286e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","method":"POST","path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194525,"nanos":704620682},"http":{"id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SX91IMNoBhndGyNh_5djDnQGjCNOm5zDiwsOzW9dysyk2niahxUflrUbe4OU"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SX91IMNoBhndGyNh_5djDnQGjCNOm5zDiwsOzW9dysyk2niahxUflrUbe4OU\"}"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","keyName":"e2e-rate-a-8a0eb0","subscription":"e2e-rate-iso-a-8a0eb0","tenant":"e2e-shared-a-923c3a","userId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a0eb0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0eb0","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a0eb0"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","keyName":"e2e-rate-a-8a0eb0","selected_subscription":"e2e-rate-iso-a-8a0eb0","selected_subscription_key":"ai-tenant-e2e-shared-a-923c3a/e2e-rate-iso-a-8a0eb0@ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0eb0","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db8e47fc-dfba-40da-9f36-b42fd07a6dae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53435972-9eec-4036-ab06-7d9de63e47cf","method":"POST","path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions","host":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34334","PortSpecifier":{"PortValue":34334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194526,"nanos":742822881},"http":{"id":"53435972-9eec-4036-ab06-7d9de63e47cf","method":"POST","headers":{":authority":"e2e-shared-a-923c3a.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SX91IMNoBhndGyNh_5djDnQGjCNOm5zDiwsOzW9dysyk2niahxUflrUbe4OU"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SX91IMNoBhndGyNh_5djDnQGjCNOm5zDiwsOzW9dysyk2niahxUflrUbe4OU\"}"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","keyName":"e2e-rate-a-8a0eb0","subscription":"e2e-rate-iso-a-8a0eb0","tenant":"e2e-shared-a-923c3a","userId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a0eb0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-923c3a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0eb0","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-923c3a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a0eb0"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"732e5401-3a42-4a00-8ba8-454b3e3157a2","keyName":"e2e-rate-a-8a0eb0","selected_subscription":"e2e-rate-iso-a-8a0eb0","selected_subscription_key":"ai-tenant-e2e-shared-a-923c3a/e2e-rate-iso-a-8a0eb0@ai-tenant-e2e-shared-a-923c3a/rate-test-model-923c3a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-923c3a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0eb0","namespace":"ai-tenant-e2e-shared-a-923c3a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53435972-9eec-4036-ab06-7d9de63e47cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47154","PortSpecifier":{"PortValue":47154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67df7826-8e9d-4a70-81de-e8a1821585c2","method":"POST","path":"/ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8/v1/completions","host":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47154","PortSpecifier":{"PortValue":47154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784194526,"nanos":779960140},"http":{"id":"67df7826-8e9d-4a70-81de-e8a1821585c2","method":"POST","headers":{":authority":"e2e-shared-b-800be8.apps.c4d02343-cd72-4656-a571-17af5023ed63.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mkOdMwZZJPpfJlAd_wOkOIT0b4OtPJgWfyVXS8AQnlxxCInFUMcvxPqpUrpn"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mkOdMwZZJPpfJlAd_wOkOIT0b4OtPJgWfyVXS8AQnlxxCInFUMcvxPqpUrpn\"}"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"327791e2-37f8-4194-9385-cd7034c904b4","keyName":"e2e-rate-b-8a0eb0","subscription":"e2e-rate-iso-b-8a0eb0","tenant":"e2e-shared-b-800be8","userId":"327791e2-37f8-4194-9385-cd7034c904b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8\",\"requestedSubscription\":\"e2e-rate-iso-b-8a0eb0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-800be8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-800be8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a0eb0","namespace":"ai-tenant-e2e-shared-b-800be8","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-800be8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8a0eb0"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"327791e2-37f8-4194-9385-cd7034c904b4","keyName":"e2e-rate-b-8a0eb0","selected_subscription":"e2e-rate-iso-b-8a0eb0","selected_subscription_key":"ai-tenant-e2e-shared-b-800be8/e2e-rate-iso-b-8a0eb0@ai-tenant-e2e-shared-b-800be8/rate-test-model-800be8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-800be8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a0eb0","namespace":"ai-tenant-e2e-shared-b-800be8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T09:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67df7826-8e9d-4a70-81de-e8a1821585c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce092bcda758103677056ccda6bb5ba957f9f0d62c6ce639ba432a570f7d37a2"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7e8b916afb6a231e432f77c5ab1757213685d5ecf28f185520ae23cbe93a2ba"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25b6038504399a6706c103df5a4e88429de4d00d099694665f161363ea0c70a9"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffdb8c147d709762211f2d104e221b35359dcb61e9add02813ed534f817ecf7c"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c355307ee29759463b2b9a1739cb3e38a98d3b773889dafa907fce18a145171"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b39bd1a15797435928e66f52699051b501ec1769c413978795cea58a49e2033"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29b43f0d5b2888ba7eb2cf1054e5b73ee2c410b045bcdbbbddf1bdadfd30ac9"} {"level":"info","ts":"2026-07-16T09:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9509033aec057bd94c125818da55a16efb4281b03a2bab0f56f9e7a19b9b8ee"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeea1083a3a66b210384ec9b6baabd9b370994448e3408d87adfd1cd127b1dec"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ca269d1a67ca1ab3152f0f0eb0e8aafb79196bd14a0923e2baa82c3d135a293"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e358341530f015e169ee6b069c9c1853decac2401b4cd708284e736de158c1fd"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcea2616a511bab15c190173976687445ae434c4b0f785d60e8ba7e1a2cde420"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16104b27f66a599403265ed0771c0b3ea4b986ac1d70d2e57ed7460caef7b578"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32c6d7a77e02fc117bf52bbe3215e58532dde093525e558fc16150f4c32c511f"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61213f10854e3809ae0688a97765099e1e9ff0be6ed8febe2b99114903156a8c"} {"level":"info","ts":"2026-07-16T09:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24313b76ebfc86a181d9b4968c6d86c07c484e25c2ac4d2ad751552940c5d3ef"} {"level":"info","ts":"2026-07-16T09:35:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1ad9f8ba5fb23f7b8895ebf422026ad8c4c3b08cf1b620790d7195a0c711039"} {"level":"info","ts":"2026-07-16T09:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d2a5cfa6a4384a1e41e0d4d3b9d4ff3a1c1e45da2a7a44b0bb96f6b64320d68"} {"level":"info","ts":"2026-07-16T09:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f50022735037d5d25509a10efafe614d9f59ec332d3864200490e99e1a66ac65"} {"level":"info","ts":"2026-07-16T09:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ff0e1401f2350aece3d5c02d65f16db54d06b0c58687dd98aff9f6c37ba456"} {"level":"info","ts":"2026-07-16T09:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03e8e1b45052d7ae31a4aedb015d0f6f06ac1f9ef40f1a1a4bf46a02f58270cb"} {"level":"info","ts":"2026-07-16T09:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8646342ff579cdaccc445bc97497bcd4bbad8d4070551bf46638f8ab7fbe3a90"} {"level":"info","ts":"2026-07-16T09:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6028330a771b386c4e466198d520d631938b9f98ba42b189e04d5610b57a292"} {"level":"info","ts":"2026-07-16T09:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa3e9cea59c6f91019b1bf5729564a3bd0c6d144f6fcccff47915e9e0c3817a5"}