--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"debug","ts":"2026-07-07T11:01:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56"} {"level":"error","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56"} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:01:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:01:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56"} {"level":"info","ts":"2026-07-07T11:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cf6644f36edc7d500408af104a7ad0edabc6d9f7f6ea8bef36497366e650f7b"} {"level":"info","ts":"2026-07-07T11:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30ebee5356aa7734ea64fe60f7429cb26c3daec8105bdbb23e647f88621ada7d"} {"level":"info","ts":"2026-07-07T11:01:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082d6d50072fdca8139df33419262fbb999f1083b5046dda61f688fdbc2afe56"} {"level":"info","ts":"2026-07-07T11:01:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8ac5ecf74f0a041ece04892b779bcbb0f88755cb52e9fc3a149899ca3362b74"} {"level":"debug","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"info","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"info","ts":"2026-07-07T11:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"error","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939"} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9"} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939"} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9"} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"} {"level":"debug","ts":"2026-07-07T11:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:02:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd"} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:02:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf"} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"error","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:03:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36296","PortSpecifier":{"PortValue":36296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36296","PortSpecifier":{"PortValue":36296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422182,"nanos":96385455},"http":{"id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd2b956b-6e35-4dd6-a8bf-e7da3dcfda4e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38104","PortSpecifier":{"PortValue":38104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e61a8f-1513-46df-808c-7df96f8e0763","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38104","PortSpecifier":{"PortValue":38104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422182,"nanos":162877885},"http":{"id":"e3e61a8f-1513-46df-808c-7df96f8e0763","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e61a8f-1513-46df-808c-7df96f8e0763","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e321360d-3b21-42b0-b140-a2c78780c465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36312","PortSpecifier":{"PortValue":36312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e321360d-3b21-42b0-b140-a2c78780c465","method":"GET","path":"/maas-api/v1/api-keys/ac9f788d-cebb-40a4-953c-44286d7d6845","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e321360d-3b21-42b0-b140-a2c78780c465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36312","PortSpecifier":{"PortValue":36312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422182,"nanos":250687755},"http":{"id":"e321360d-3b21-42b0-b140-a2c78780c465","method":"GET","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac9f788d-cebb-40a4-953c-44286d7d6845",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e321360d-3b21-42b0-b140-a2c78780c465","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e321360d-3b21-42b0-b140-a2c78780c465","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac9f788d-cebb-40a4-953c-44286d7d6845",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e321360d-3b21-42b0-b140-a2c78780c465","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e321360d-3b21-42b0-b140-a2c78780c465","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e321360d-3b21-42b0-b140-a2c78780c465","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38114","PortSpecifier":{"PortValue":38114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","method":"GET","path":"/maas-api/v1/api-keys/b43080c3-0c09-45d7-bbd8-8fdffa381d33","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38114","PortSpecifier":{"PortValue":38114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422182,"nanos":290400893},"http":{"id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","method":"GET","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b43080c3-0c09-45d7-bbd8-8fdffa381d33",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b43080c3-0c09-45d7-bbd8-8fdffa381d33",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdf79ce3-b5cb-4bd4-b3f7-60a8a2d0077a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36760","PortSpecifier":{"PortValue":36760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad1a045a-9333-42c6-af74-251e2c8c590a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36760","PortSpecifier":{"PortValue":36760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422197,"nanos":367901020},"http":{"id":"ad1a045a-9333-42c6-af74-251e2c8c590a","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad1a045a-9333-42c6-af74-251e2c8c590a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34508","PortSpecifier":{"PortValue":34508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34508","PortSpecifier":{"PortValue":34508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422197,"nanos":404609326},"http":{"id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73cf55d6-8403-49d8-aa75-c1fa431227b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36762","PortSpecifier":{"PortValue":36762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36762","PortSpecifier":{"PortValue":36762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422197,"nanos":448375043},"http":{"id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","method":"GET","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TtM8KoW1valQCtMo_ENpLCcNhOyTnwFjp76ujUeTcdnYadIivjGuoUuCmnUb"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TtM8KoW1valQCtMo_ENpLCcNhOyTnwFjp76ujUeTcdnYadIivjGuoUuCmnUb\"}"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"35f5d7c6-f3ca-438b-8681-466f981acf93","keyName":"e2e-auth-iso-a-70dc30","subscription":"e2e-auth-iso-572a3a","tenant":"e2e-shared-a-1273de","userId":"35f5d7c6-f3ca-438b-8681-466f981acf93","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-572a3a"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1977652-19fb-4a31-bb7f-6ffb1be4b1d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59820","PortSpecifier":{"PortValue":59820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59820","PortSpecifier":{"PortValue":59820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422212,"nanos":526719747},"http":{"id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"953c3692-39f6-4b12-b7ce-d484b47c52d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34984","PortSpecifier":{"PortValue":34984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"376d0ac5-2978-4a3c-901c-214417775ba2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34984","PortSpecifier":{"PortValue":34984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422212,"nanos":560359986},"http":{"id":"376d0ac5-2978-4a3c-901c-214417775ba2","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"376d0ac5-2978-4a3c-901c-214417775ba2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34996","PortSpecifier":{"PortValue":34996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34996","PortSpecifier":{"PortValue":34996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422212,"nanos":598355039},"http":{"id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","method":"GET","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GrcHipTI9t4tR2VA_8HPrwUaBYYFJmxkYdiHRF1W6oDdJaV0Kwcid3jjU7rA"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GrcHipTI9t4tR2VA_8HPrwUaBYYFJmxkYdiHRF1W6oDdJaV0Kwcid3jjU7rA\"}"} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T11:03:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6821ae27-eb87-48bf-a915-19a7d3e55bac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52610","PortSpecifier":{"PortValue":52610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52610","PortSpecifier":{"PortValue":52610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422234,"nanos":975297827},"http":{"id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"803b5c43-2b27-4df2-aa00-a427aa9143d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20d1934f-099c-4076-923f-19d8737ed61d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47298","PortSpecifier":{"PortValue":47298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20d1934f-099c-4076-923f-19d8737ed61d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20d1934f-099c-4076-923f-19d8737ed61d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47298","PortSpecifier":{"PortValue":47298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422235,"nanos":10438566},"http":{"id":"20d1934f-099c-4076-923f-19d8737ed61d","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20d1934f-099c-4076-923f-19d8737ed61d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20d1934f-099c-4076-923f-19d8737ed61d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20d1934f-099c-4076-923f-19d8737ed61d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20d1934f-099c-4076-923f-19d8737ed61d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20d1934f-099c-4076-923f-19d8737ed61d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52622","PortSpecifier":{"PortValue":52622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52622","PortSpecifier":{"PortValue":52622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422235,"nanos":46378801},"http":{"id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e9658b-0247-4e2b-bdd1-cc703b41afa9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47310","PortSpecifier":{"PortValue":47310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47310","PortSpecifier":{"PortValue":47310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422235,"nanos":82936144},"http":{"id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53107a5a-ff7a-45fa-bc94-9e15be4bd831","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a089daa-57a4-4281-9c11-efea9ea746ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422252,"nanos":522204480},"http":{"id":"7a089daa-57a4-4281-9c11-efea9ea746ae","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a089daa-57a4-4281-9c11-efea9ea746ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59738","PortSpecifier":{"PortValue":59738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59738","PortSpecifier":{"PortValue":59738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422252,"nanos":558540643},"http":{"id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec446690-69a5-46f5-83bf-e1c06ae40fa4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","method":"GET","path":"/maas-api/v1/api-keys/a93fe4ea-dafd-400f-aaa5-c013e58efc19","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422252,"nanos":593200782},"http":{"id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","method":"GET","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a93fe4ea-dafd-400f-aaa5-c013e58efc19",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a93fe4ea-dafd-400f-aaa5-c013e58efc19",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b136dce-ea29-4bff-8b04-adcc78c71c8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39438","PortSpecifier":{"PortValue":39438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","method":"GET","path":"/maas-api/v1/api-keys/a93fe4ea-dafd-400f-aaa5-c013e58efc19","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39438","PortSpecifier":{"PortValue":39438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422252,"nanos":630880992},"http":{"id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","method":"GET","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a93fe4ea-dafd-400f-aaa5-c013e58efc19",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a93fe4ea-dafd-400f-aaa5-c013e58efc19",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da650f57-cbf1-46cc-8504-fa4a8bae9f7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36932","PortSpecifier":{"PortValue":36932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39fd884a-af9c-4dea-9298-1a2852a991b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36932","PortSpecifier":{"PortValue":36932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422269,"nanos":997930408},"http":{"id":"39fd884a-af9c-4dea-9298-1a2852a991b8","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39fd884a-af9c-4dea-9298-1a2852a991b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58468","PortSpecifier":{"PortValue":58468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bc19b6e-a82b-4714-ba40-37094d529469","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58468","PortSpecifier":{"PortValue":58468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422270,"nanos":30281648},"http":{"id":"5bc19b6e-a82b-4714-ba40-37094d529469","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/auth-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bc19b6e-a82b-4714-ba40-37094d529469","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36946","PortSpecifier":{"PortValue":36946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36946","PortSpecifier":{"PortValue":36946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422270,"nanos":65944012},"http":{"id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O9N3Xkc30XZZBryE_97avh8jT3PLKw0T3YYSkedCjx6KzZlW50MxgMJ836R7"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O9N3Xkc30XZZBryE_97avh8jT3PLKw0T3YYSkedCjx6KzZlW50MxgMJ836R7\"}"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"942c00a3-ae45-4d56-9c56-b5940c651c22","keyName":"e2e-auth-iso-a-323179","subscription":"e2e-auth-iso-c10f82","tenant":"e2e-shared-a-1273de","userId":"942c00a3-ae45-4d56-9c56-b5940c651c22","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/auth-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c10f82"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b7c189-a7e2-4a57-87c1-3ca427d4d908","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b72a0de21113b2726d984da267e6b63ebec32ce04507678e3609eafd6c55913"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90fcc5f11e3b60c4312559fd5d87b9e3084b322a7effa90bd66fd32282cbf5c8"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8feb6bd9e18fe95bd465e9bc098af00f4c39729747319b93f2182ed81134038b"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13eeca83bb789ba581c2ed290752f7a815dec0437c69a6c06a22123bc6006048"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3a8b94b500b274af931dcb0544a4b86d580bd0d5277958fdeb78d7061ae14bb"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af7fd7e7adaa33fa8380ad37cc15b3b47df62ebcaa0dace62bb4199bd8f01829"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9bad87c79f3b76a0e084fbeb7949ff666e47e47b4ea008831b3f4d7e5fc0832"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e8f7adfecfeb5d79b50f5ae6712e185bda97404d5107164fcdc5fb837e4d939"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10d4b209a2ca8e6388906179c40925cd914c7a91bd80d9add00613528cc89003"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c12cc131ca3dc3005cbb5c0a160290c24625d12a49472454ca05b336030b6ebd"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b30e6157c82a280d086f8cc8da6a256b321da5e1dece6e24c44084e38ed7e2f"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bda3d3857b78aade983902253d4bdbd5d66d3a7b0493e9aa9aa3806895bc385"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3078dd7ff22789ea1dd68fa7befffc2fadc4f315cd54e97b8caf6fa6074a36cf"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/926bfe947b5fd169e7f3cdfb41da231a16feeda5b3934535ccc5f7c11c0bf941"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/027186aa6047437738e6c21864ea092302fd255d188ec7bdfc3be414661cca70"} {"level":"info","ts":"2026-07-07T11:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef50eab8e51e15deed39955a7dec758cfebd74ba421b20fdddf18a6fcdececc9"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"error","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d"} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"debug","ts":"2026-07-07T11:05:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7"} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7"} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7"} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7"} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47484","PortSpecifier":{"PortValue":47484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05414579-e6cd-4ae7-89b6-b30b2534428e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47484","PortSpecifier":{"PortValue":47484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422336,"nanos":555534804},"http":{"id":"05414579-e6cd-4ae7-89b6-b30b2534428e","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/sub-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05414579-e6cd-4ae7-89b6-b30b2534428e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59268","PortSpecifier":{"PortValue":59268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"661d7bc8-7620-4f6d-a57b-442f815477cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59268","PortSpecifier":{"PortValue":59268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422336,"nanos":594350911},"http":{"id":"661d7bc8-7620-4f6d-a57b-442f815477cd","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/sub-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"661d7bc8-7620-4f6d-a57b-442f815477cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47494","PortSpecifier":{"PortValue":47494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47494","PortSpecifier":{"PortValue":47494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422336,"nanos":631403318},"http":{"id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","method":"GET","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7UTdJvuTOzBuakzx_qsg90ePqfgsZB14EBYY0TnbKSnTHcwP1ObTiP64Krmx"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7UTdJvuTOzBuakzx_qsg90ePqfgsZB14EBYY0TnbKSnTHcwP1ObTiP64Krmx\"}"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d38e79f5-bf92-4eb3-9aea-b9a39fcd2db8","keyName":"e2e-sub-iso-b3b00e","subscription":"e2e-a-only-dba067","tenant":"e2e-shared-a-1273de","userId":"d38e79f5-bf92-4eb3-9aea-b9a39fcd2db8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/sub-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-dba067"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4fe32db-172d-48e6-8ba2-686f87d43c47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59276","PortSpecifier":{"PortValue":59276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59276","PortSpecifier":{"PortValue":59276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422336,"nanos":668344807},"http":{"id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","method":"GET","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3Lps3jHcw3KBevqH_i2b6GojNFg7ruOGhhIuooWMp4PZLDJqz2P8zVmAhHSm"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3Lps3jHcw3KBevqH_i2b6GojNFg7ruOGhhIuooWMp4PZLDJqz2P8zVmAhHSm\"}"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5060e83-7b6f-4f73-bdb0-2a81fe78245b","keyName":"e2e-sub-iso-168f3d","subscription":"e2e-b-only-dba067","tenant":"e2e-shared-b-2a3633","userId":"d5060e83-7b6f-4f73-bdb0-2a81fe78245b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/sub-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-dba067"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9a382e4-cf9f-421f-94dd-0a5dbdd396ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3920a97d-f107-465a-93ed-fc38a18408af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58552","PortSpecifier":{"PortValue":58552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3920a97d-f107-465a-93ed-fc38a18408af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3920a97d-f107-465a-93ed-fc38a18408af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58552","PortSpecifier":{"PortValue":58552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422344,"nanos":536872721},"http":{"id":"3920a97d-f107-465a-93ed-fc38a18408af","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3920a97d-f107-465a-93ed-fc38a18408af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3920a97d-f107-465a-93ed-fc38a18408af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/sub-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3920a97d-f107-465a-93ed-fc38a18408af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3920a97d-f107-465a-93ed-fc38a18408af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3920a97d-f107-465a-93ed-fc38a18408af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"189b3168-1722-4b42-b927-5311e6b43791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47230","PortSpecifier":{"PortValue":47230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"189b3168-1722-4b42-b927-5311e6b43791","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"189b3168-1722-4b42-b927-5311e6b43791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47230","PortSpecifier":{"PortValue":47230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422344,"nanos":573022635},"http":{"id":"189b3168-1722-4b42-b927-5311e6b43791","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"189b3168-1722-4b42-b927-5311e6b43791","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"189b3168-1722-4b42-b927-5311e6b43791","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/sub-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189b3168-1722-4b42-b927-5311e6b43791","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"189b3168-1722-4b42-b927-5311e6b43791","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"189b3168-1722-4b42-b927-5311e6b43791","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58558","PortSpecifier":{"PortValue":58558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58558","PortSpecifier":{"PortValue":58558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422344,"nanos":608704444},"http":{"id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bvoi4c6gppiRDEqs_wArbx4IZWiCDtVpGr51VpoVcYA3mpv2OX50HTMjZ6K7"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bvoi4c6gppiRDEqs_wArbx4IZWiCDtVpGr51VpoVcYA3mpv2OX50HTMjZ6K7\"}"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e6ce539e-f6c5-4e5f-adec-66a6c61dfbf6","keyName":"e2e-sub-iso-b9deb2","subscription":"e2e-shared-sub-3b1c05","tenant":"e2e-shared-a-1273de","userId":"e6ce539e-f6c5-4e5f-adec-66a6c61dfbf6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/sub-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3b1c05"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"951fb96c-7c0c-46d8-9d62-eb2558ddc6df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47234","PortSpecifier":{"PortValue":47234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47234","PortSpecifier":{"PortValue":47234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422344,"nanos":637162197},"http":{"id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q7Q6GVRi0oC1KJBQ_dELlLoUWdnGvYVArVBBUAjDUmq5Myk4KgTTI0w4fZ63"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q7Q6GVRi0oC1KJBQ_dELlLoUWdnGvYVArVBBUAjDUmq5Myk4KgTTI0w4fZ63\"}"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b239f80d-7243-45e1-9a54-41793258360a","keyName":"e2e-sub-iso-aab548","subscription":"e2e-shared-sub-3b1c05","tenant":"e2e-shared-b-2a3633","userId":"b239f80d-7243-45e1-9a54-41793258360a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/sub-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3b1c05"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e08a1474-0ed3-40f4-b9c3-a4111be07b4b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b32066c4bfffbc8ffc39814d60d8f09608d1d2a083eb2e4812627443d95896d"} {"level":"info","ts":"2026-07-07T11:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e103c4045a31ef27cc49a919d1a2afb3c95bafd3e3ec3c6e7c02d5bec7cac8af"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6c33657b0d14ec9c5501c6ce472c361d88a226e6354d11d8ba24b702aff4e7"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8991f310de3325789f0ed612dd7151de16e0358ddfb6699f46c32b234e023363"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9e3f399fcc044f4ad5f392abaf0db6e2e7cc57c08684b8c2715137d37328025"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ae83262512b49a52f3703276f01d82f464c23ab50f7bb2d87b4c8940e72ccd7"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/772fce315a666ee13b5417c71f43a882b3069fda6f68ba7e22314a511615916a"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95ae37be4f7611ecd46e8e17b4c9bf6dbb5f682075d7b66cdafe09b0e33047c6"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d995113f750383ab9dea560403953a4dff82a1dc6677e93cb494494aa6c0a28"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6eb8c70c5a6ddbc0262e7d12b686a66f19438383dde4f953a99800b815615bb"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7fa33cc358ab8218925d382ae69eb043637270ce8238a55c801cc37fa924e7"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a00717f8a810077d28d225af8becbf139acc61ea136166061d7c9c0e97925a6"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffe95d5a05703c0238b80a531fd2030cf98d0530ee6741911796d9650095a343"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d0ca477667ffb7664c71adc3a21a5d1c354163571b160a196c3125a818745fb"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40694dbe43c84cf9ab00820227c66017c40aeb379f1475e07365be343e2ab90a"} {"level":"info","ts":"2026-07-07T11:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e82ef284d18608167da31d0a62af2a87dcb761500ff1c87808ca76d205e367f"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"error","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"} {"level":"error","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"error","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"error","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"error","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"info","ts":"2026-07-07T11:06:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"debug","ts":"2026-07-07T11:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"error","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"error","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"error","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T11:06:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T11:06:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"info","ts":"2026-07-07T11:06:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4221e097-6c6e-481e-9f5b-339788c0bd92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38956","PortSpecifier":{"PortValue":38956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422409,"nanos":753412936},"http":{"id":"4221e097-6c6e-481e-9f5b-339788c0bd92","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4221e097-6c6e-481e-9f5b-339788c0bd92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41752","PortSpecifier":{"PortValue":41752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7354bd09-229a-43f6-a3d5-41e492088c8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41752","PortSpecifier":{"PortValue":41752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422409,"nanos":793504864},"http":{"id":"7354bd09-229a-43f6-a3d5-41e492088c8f","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7354bd09-229a-43f6-a3d5-41e492088c8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38970","PortSpecifier":{"PortValue":38970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45d18d82-f464-4fe0-8820-54aaf1af3312","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38970","PortSpecifier":{"PortValue":38970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422409,"nanos":831466899},"http":{"id":"45d18d82-f464-4fe0-8820-54aaf1af3312","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz\"}"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","subscription":"e2e-rate-iso-a-d268d6","tenant":"e2e-shared-a-1273de","userId":"9d513268-3797-4660-b606-0d5d17ae61a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-d268d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d268d6"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","selected_subscription":"e2e-rate-iso-a-d268d6","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-d268d6@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:06:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45d18d82-f464-4fe0-8820-54aaf1af3312","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38978","PortSpecifier":{"PortValue":38978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38978","PortSpecifier":{"PortValue":38978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422410,"nanos":889982378},"http":{"id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz\"}"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","subscription":"e2e-rate-iso-a-d268d6","tenant":"e2e-shared-a-1273de","userId":"9d513268-3797-4660-b606-0d5d17ae61a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-d268d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d268d6"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","selected_subscription":"e2e-rate-iso-a-d268d6","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-d268d6@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:06:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1879039b-0edc-4a7f-b4a0-90d10f7063e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38984","PortSpecifier":{"PortValue":38984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38984","PortSpecifier":{"PortValue":38984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422411,"nanos":928016630},"http":{"id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ATWumPUgTDa5lTjw_gg9sfF0hhbvR1GlQPiIVEFp9MTee56TsvV5AaI6vcxz\"}"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","subscription":"e2e-rate-iso-a-d268d6","tenant":"e2e-shared-a-1273de","userId":"9d513268-3797-4660-b606-0d5d17ae61a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-d268d6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d268d6"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d513268-3797-4660-b606-0d5d17ae61a7","keyName":"e2e-rate-a-d268d6","selected_subscription":"e2e-rate-iso-a-d268d6","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-d268d6@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d268d6","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:06:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee66053c-ca31-414d-b3d2-6785921f2f0a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55512","PortSpecifier":{"PortValue":55512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"801e3562-8aaa-4a43-8723-91154d5b0218","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55512","PortSpecifier":{"PortValue":55512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422422,"nanos":685482485},"http":{"id":"801e3562-8aaa-4a43-8723-91154d5b0218","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801e3562-8aaa-4a43-8723-91154d5b0218","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59158","PortSpecifier":{"PortValue":59158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59158","PortSpecifier":{"PortValue":59158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422422,"nanos":761046701},"http":{"id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"]}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d10aa99f019a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c77a6212-bdbc-4ffd-8042-5bc1ff5fd251"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2b5af85a-8447-44bd-a64d-ecb0a992d672","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd6c4c7b-8129-4a45-81a8-1bd03a5f26d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55528","PortSpecifier":{"PortValue":55528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55528","PortSpecifier":{"PortValue":55528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422422,"nanos":796871270},"http":{"id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD\"}"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","subscription":"e2e-rate-iso-a-019a4a","tenant":"e2e-shared-a-1273de","userId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-019a4a"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","selected_subscription":"e2e-rate-iso-a-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-019a4a@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc9907c6-d36f-4234-b5f0-b23ec7176b67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55536","PortSpecifier":{"PortValue":55536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55536","PortSpecifier":{"PortValue":55536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422423,"nanos":835997005},"http":{"id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD\"}"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","subscription":"e2e-rate-iso-a-019a4a","tenant":"e2e-shared-a-1273de","userId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-019a4a"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","selected_subscription":"e2e-rate-iso-a-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-019a4a@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:07:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d10cfbc2-ffd3-4517-9e22-f6ac1898c725","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55548","PortSpecifier":{"PortValue":55548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","method":"POST","path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions","host":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55548","PortSpecifier":{"PortValue":55548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422424,"nanos":873016751},"http":{"id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","method":"POST","headers":{":authority":"e2e-shared-a-1273de.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YWxhNT5ogancOXYH_194oNuHr63x8B5LQHXmSIC0JYfAEkXsZYkwq9oIHPJD\"}"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","subscription":"e2e-rate-iso-a-019a4a","tenant":"e2e-shared-a-1273de","userId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\",\"requestedSubscription\":\"e2e-rate-iso-a-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1273de.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-019a4a"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2ac14303-3a43-41ef-aa7f-014ddd69910e","keyName":"e2e-rate-a-019a4a","selected_subscription":"e2e-rate-iso-a-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-a-1273de/e2e-rate-iso-a-019a4a@ai-tenant-e2e-shared-a-1273de/rate-test-model-1273de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1273de","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-019a4a","namespace":"ai-tenant-e2e-shared-a-1273de","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6de58f4-b4bf-40e0-86cf-e5418525d133","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59168","PortSpecifier":{"PortValue":59168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","method":"POST","path":"/ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633/v1/completions","host":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59168","PortSpecifier":{"PortValue":59168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783422424,"nanos":907366529},"http":{"id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","method":"POST","headers":{":authority":"e2e-shared-b-2a3633.apps.763698c5-dd01-4fe1-b4e1-d10aa99f019a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yS7MuAeM2S47DLcS_3voJ9KmbifqhqHFqQq8N5eIfwBah6X8k4V5eABLXNSQ"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yS7MuAeM2S47DLcS_3voJ9KmbifqhqHFqQq8N5eIfwBah6X8k4V5eABLXNSQ\"}"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3421a804-1110-4310-b4d9-38fffa464851","keyName":"e2e-rate-b-019a4a","subscription":"e2e-rate-iso-b-019a4a","tenant":"e2e-shared-b-2a3633","userId":"3421a804-1110-4310-b4d9-38fffa464851","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\",\"requestedSubscription\":\"e2e-rate-iso-b-019a4a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2a3633.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2a3633","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-019a4a","namespace":"ai-tenant-e2e-shared-b-2a3633","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-019a4a"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3421a804-1110-4310-b4d9-38fffa464851","keyName":"e2e-rate-b-019a4a","selected_subscription":"e2e-rate-iso-b-019a4a","selected_subscription_key":"ai-tenant-e2e-shared-b-2a3633/e2e-rate-iso-b-019a4a@ai-tenant-e2e-shared-b-2a3633/rate-test-model-2a3633","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2a3633","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-019a4a","namespace":"ai-tenant-e2e-shared-b-2a3633","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T11:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b2d0a8-72cb-444e-9ce5-2255ae15b445","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712c0654324455c21e56733d2bba5a51df12015c14f627a39f1ed96385568585"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7e24abc067f218d2efbb617edd2964e9be9732821068039c5ff791d6322c5a"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ce7da7798f9fda506aec9a31dbfa64d2549082e494d919871de311b4a8cd9f"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25467c4e61d22a1e3a87c07e8b565ec6031d78206b466ab6a2d205e14ece975b"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fea9f84b8a3507fcdcc06528bccd1193885aeb7552befd18bf796e941e679cf"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6e38916d4f8e950ba27cfa6e959612d2b7532f1d675a50b89bdba8bc6a0eb6"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b809344687679605c7fc5b5bda5036064bb72af3207f4714809b6e1d972b92a3"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78c1848c5a8c3a826586c1e429aaa829979f9cbe7db3e58221d1ea3be4b3b974"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5cfbb26dd17c44b75a525a277408b8d465725219897d4a9c8d2f8e8b4e25f16"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a09803801da0a3b7324dd6f89fef1de601907f317e7b45ca888902d6f4310ba1"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5c4c8c8fbd19e87ab253c78dfbce9c00965aa7c2fe31b0c355f5f02463fb2e9"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f73b65b97312e3846b6fbd9d927cb2918bfc953c525501bc72c24edf3e4d3128"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c1e76c90c216855500030f734ad523b64333c93ee9a7ea234721d4a04c5a2cf"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a160f7d077dd00c042e4ade9e29f7cbbe4636f34a6728c77446fc5d6386739"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6303059d921007632490dfb6351f8c8c6a76393a4e6b9f72395ebe00a137f4d"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c9aaa54c8bd68c208ffabf508db4b515535c09709e473e6b841a9890990e53"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4473216f62cac125c8979b1523e7c1180f855d789f80081be8e8af8f0dca8b5"} {"level":"info","ts":"2026-07-07T11:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db37da09cd9be228bb2efb6d08f86a6f6831ac9ede1bfb1705008cc8c9bdae78"} {"level":"info","ts":"2026-07-07T11:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8905c30470428c4d491467ecbed1303280c5bb202b945de4c837a785e6275755"} {"level":"info","ts":"2026-07-07T11:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c6418d5089d44854a48ad0870cf1b951326cb281cd17cf8f33df37bada19b57"}