--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"} {"level":"info","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724"} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724"} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525"} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:43:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724"} {"level":"info","ts":"2026-07-08T09:43:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46772","PortSpecifier":{"PortValue":46772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46772","PortSpecifier":{"PortValue":46772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503790,"nanos":379949934},"http":{"id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"520003e0-b2ad-4f9e-9130-d317f47ae8a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38638","PortSpecifier":{"PortValue":38638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38638","PortSpecifier":{"PortValue":38638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503790,"nanos":443937651},"http":{"id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"815b2740-9cc6-4729-9910-2ce30ebe27ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46786","PortSpecifier":{"PortValue":46786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","method":"GET","path":"/maas-api/v1/api-keys/0a933e6c-42f1-4933-bdf3-5b571cc7f245","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46786","PortSpecifier":{"PortValue":46786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503790,"nanos":529066208},"http":{"id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","method":"GET","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0a933e6c-42f1-4933-bdf3-5b571cc7f245",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0a933e6c-42f1-4933-bdf3-5b571cc7f245",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf74b459-f8b0-42b5-b595-0c95a4959b44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38642","PortSpecifier":{"PortValue":38642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","method":"GET","path":"/maas-api/v1/api-keys/948453a2-0d40-481f-a89a-3dd0b064614b","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38642","PortSpecifier":{"PortValue":38642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503790,"nanos":560792430},"http":{"id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","method":"GET","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/948453a2-0d40-481f-a89a-3dd0b064614b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/948453a2-0d40-481f-a89a-3dd0b064614b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6aab3d3-6084-4eff-935f-32db5e2878cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1956bf77-3351-4438-b695-85330a55f2e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53574","PortSpecifier":{"PortValue":53574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1956bf77-3351-4438-b695-85330a55f2e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1956bf77-3351-4438-b695-85330a55f2e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53574","PortSpecifier":{"PortValue":53574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503805,"nanos":711886168},"http":{"id":"1956bf77-3351-4438-b695-85330a55f2e7","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1956bf77-3351-4438-b695-85330a55f2e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1956bf77-3351-4438-b695-85330a55f2e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1956bf77-3351-4438-b695-85330a55f2e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1956bf77-3351-4438-b695-85330a55f2e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1956bf77-3351-4438-b695-85330a55f2e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50860","PortSpecifier":{"PortValue":50860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50860","PortSpecifier":{"PortValue":50860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503805,"nanos":751831503},"http":{"id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116cf8b5-f8bf-4f9f-8d4b-5fd02171a281","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53582","PortSpecifier":{"PortValue":53582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e531b5ca-9690-453e-bad7-181b39ab714e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53582","PortSpecifier":{"PortValue":53582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503805,"nanos":790221663},"http":{"id":"e531b5ca-9690-453e-bad7-181b39ab714e","method":"GET","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l6mEPC9V7E47lDGQ_JFbZqbjyYfYVT2Qg8DbixhoSPooy9gSdYFolDYLisng"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l6mEPC9V7E47lDGQ_JFbZqbjyYfYVT2Qg8DbixhoSPooy9gSdYFolDYLisng\"}"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd2d42bf-b8a2-4632-bc9d-94889f398631","keyName":"e2e-auth-iso-a-6f7683","subscription":"e2e-auth-iso-95a028","tenant":"e2e-shared-a-8c4427","userId":"bd2d42bf-b8a2-4632-bc9d-94889f398631","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-95a028"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e531b5ca-9690-453e-bad7-181b39ab714e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55160","PortSpecifier":{"PortValue":55160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09852ea9-3fc3-4a29-899f-051de106fb9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55160","PortSpecifier":{"PortValue":55160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503823,"nanos":116406811},"http":{"id":"09852ea9-3fc3-4a29-899f-051de106fb9e","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09852ea9-3fc3-4a29-899f-051de106fb9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37986","PortSpecifier":{"PortValue":37986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37986","PortSpecifier":{"PortValue":37986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503823,"nanos":158458296},"http":{"id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5b7ea30-f21f-9972-85b1-5ef81366e7be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37996","PortSpecifier":{"PortValue":37996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37996","PortSpecifier":{"PortValue":37996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503823,"nanos":197736754},"http":{"id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","method":"GET","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BzCNwNy9PdJEcdl3_ZPVP72l15xAAcpJ9XT4rokjPfuuCjaMoUG9xEMi3b3x"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BzCNwNy9PdJEcdl3_ZPVP72l15xAAcpJ9XT4rokjPfuuCjaMoUG9xEMi3b3x\"}"} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-08T09:43:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b3ea28-aa22-420f-b1dd-ba6059758a79","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8ca1a91-508b-477a-8934-15341d003557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35798","PortSpecifier":{"PortValue":35798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8ca1a91-508b-477a-8934-15341d003557","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8ca1a91-508b-477a-8934-15341d003557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35798","PortSpecifier":{"PortValue":35798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503840,"nanos":536500686},"http":{"id":"c8ca1a91-508b-477a-8934-15341d003557","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8ca1a91-508b-477a-8934-15341d003557","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8ca1a91-508b-477a-8934-15341d003557","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8ca1a91-508b-477a-8934-15341d003557","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8ca1a91-508b-477a-8934-15341d003557","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8ca1a91-508b-477a-8934-15341d003557","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48938","PortSpecifier":{"PortValue":48938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bb3436d-51ab-4996-9e73-74b112486f0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48938","PortSpecifier":{"PortValue":48938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503840,"nanos":569343954},"http":{"id":"1bb3436d-51ab-4996-9e73-74b112486f0f","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb3436d-51ab-4996-9e73-74b112486f0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503840,"nanos":607664356},"http":{"id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8acf8dfd-ad1f-4c22-b478-b6a0ed72f7d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48940","PortSpecifier":{"PortValue":48940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48940","PortSpecifier":{"PortValue":48940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503840,"nanos":648577136},"http":{"id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b7b6fc-6244-4b28-92a5-75f3b6e571dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54994","PortSpecifier":{"PortValue":54994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd1bf59a-a734-424b-991a-3540bfb6639f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54994","PortSpecifier":{"PortValue":54994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503858,"nanos":249492668},"http":{"id":"bd1bf59a-a734-424b-991a-3540bfb6639f","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd1bf59a-a734-424b-991a-3540bfb6639f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40314","PortSpecifier":{"PortValue":40314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"793ccab6-ca0d-4ecd-9757-5b8353157488","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40314","PortSpecifier":{"PortValue":40314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503858,"nanos":288202281},"http":{"id":"793ccab6-ca0d-4ecd-9757-5b8353157488","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"793ccab6-ca0d-4ecd-9757-5b8353157488","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b43970f-2926-4f86-944f-0a90d105017f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b43970f-2926-4f86-944f-0a90d105017f","method":"GET","path":"/maas-api/v1/api-keys/5e1b7469-8529-4d10-9758-b964b0f5dbcd","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b43970f-2926-4f86-944f-0a90d105017f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503858,"nanos":326855236},"http":{"id":"5b43970f-2926-4f86-944f-0a90d105017f","method":"GET","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5e1b7469-8529-4d10-9758-b964b0f5dbcd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b43970f-2926-4f86-944f-0a90d105017f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b43970f-2926-4f86-944f-0a90d105017f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5e1b7469-8529-4d10-9758-b964b0f5dbcd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b43970f-2926-4f86-944f-0a90d105017f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b43970f-2926-4f86-944f-0a90d105017f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b43970f-2926-4f86-944f-0a90d105017f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55000","PortSpecifier":{"PortValue":55000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","method":"GET","path":"/maas-api/v1/api-keys/5e1b7469-8529-4d10-9758-b964b0f5dbcd","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55000","PortSpecifier":{"PortValue":55000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503858,"nanos":365090940},"http":{"id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","method":"GET","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5e1b7469-8529-4d10-9758-b964b0f5dbcd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5e1b7469-8529-4d10-9758-b964b0f5dbcd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"292ef431-a1c4-4f23-af20-a8aaba758fb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36854","PortSpecifier":{"PortValue":36854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"deef4425-99b8-4965-81a7-b5ee91e246cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36854","PortSpecifier":{"PortValue":36854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503880,"nanos":874533183},"http":{"id":"deef4425-99b8-4965-81a7-b5ee91e246cd","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"deef4425-99b8-4965-81a7-b5ee91e246cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38236","PortSpecifier":{"PortValue":38236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38236","PortSpecifier":{"PortValue":38236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503880,"nanos":912312234},"http":{"id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/auth-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"138f6bc6-11f8-4bc0-8e2b-d9d6d0796c21","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503880,"nanos":951189639},"http":{"id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VuoWHViEKE7MAmoq_LtgMkh8hDqPYmZfkYf2UbdLTYDViIZ3iUwrx9v4bq0L"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VuoWHViEKE7MAmoq_LtgMkh8hDqPYmZfkYf2UbdLTYDViIZ3iUwrx9v4bq0L\"}"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca6b82cf-56a0-4315-b854-e3eee4ec80d0","keyName":"e2e-auth-iso-a-a43a94","subscription":"e2e-auth-iso-131830","tenant":"e2e-shared-a-8c4427","userId":"ca6b82cf-56a0-4315-b854-e3eee4ec80d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/auth-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-131830"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:44:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35ec96ff-5fcf-4f00-8ca4-edefe0711baf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:44:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bccb3b84f21655c77172b7a67fd28c8780fab1630f0b3879268a2b25be84cd7"} {"level":"info","ts":"2026-07-08T09:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e71461d3522ea41afed2c5a5e22828f1f6a93759e1dc0d59847071697adab838"} {"level":"info","ts":"2026-07-08T09:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54abd2b9522c42d60012438a8ba5e7720d3d6dae0f9d4a5267c73adf95022c87"} {"level":"info","ts":"2026-07-08T09:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c61e2517ed7cb7a5a0bd3b24e515b88ce9c0a05d77092d0d3c1907cc56ebe75"} {"level":"info","ts":"2026-07-08T09:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79b34a729c3d687fe32d0b856b9f3c24f2d38e9ddbcf18cde3fa395257a95a33"} {"level":"info","ts":"2026-07-08T09:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9ceca338c8c494c4b441f51c594c024124c3bee4fd14497ce4a533b1ad845de"} {"level":"info","ts":"2026-07-08T09:44:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac1080c4bfa08cda496e4fdfc9e4a6e24672cef0ae79d8b2acc7dd5d46efc525"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43312273c9db96a5e2681115368a4fa53e3edb31aa81f98a225b5e3dac2a3ad"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6fb13f8658137a45a200d6ae1860a64a1ece991b3b186e63fdb9084def2724"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64987d98716de6a49eed275f6519e1530ad3e7dbfadaceb75f256b01f752fe20"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259db85acc0c812af3644fd21316d364c4dafe87477565f79a60f80cd0301836"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac03b936c9d9bfe5de8584958b071dd268a7d6289b7a7b461c6b579586460505"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4fb11a3578caf20820bf63ce9544ed4248c117400ae17bcd4a20ee6f8c8a6cf"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd2133703270ff30246560c8d54c19c1685d0f4eacf4b13a5ae869d5cb8e3c83"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bf8d563a3281ef6bf13304ad57fe9ccffbcfc182faef316cfa45fc76d7bb9f0"} {"level":"info","ts":"2026-07-08T09:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb029f9071a9491ae9381eb1aa196b9127346ab773ea205e2bd5c7744280350"} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02"} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"error","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02"} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:44:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"error","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02"} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"} {"level":"info","ts":"2026-07-08T09:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"error","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"debug","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"info","ts":"2026-07-08T09:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02"} {"level":"debug","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45886","PortSpecifier":{"PortValue":45886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3986466-4d9f-4f91-a59a-c79917097cf3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45886","PortSpecifier":{"PortValue":45886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503942,"nanos":228492231},"http":{"id":"c3986466-4d9f-4f91-a59a-c79917097cf3","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/sub-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3986466-4d9f-4f91-a59a-c79917097cf3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55380","PortSpecifier":{"PortValue":55380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c38819f6-2760-4fb1-bd6f-c57362106dad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55380","PortSpecifier":{"PortValue":55380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503942,"nanos":268209225},"http":{"id":"c38819f6-2760-4fb1-bd6f-c57362106dad","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/sub-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c38819f6-2760-4fb1-bd6f-c57362106dad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45890","PortSpecifier":{"PortValue":45890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45890","PortSpecifier":{"PortValue":45890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503942,"nanos":309965927},"http":{"id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","method":"GET","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RShKJH7BIJRQV3Yz_MGus1TNg4r8zrsRlKVXS9Wqc7GUMoMr2MiMq5TCElkS"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RShKJH7BIJRQV3Yz_MGus1TNg4r8zrsRlKVXS9Wqc7GUMoMr2MiMq5TCElkS\"}"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d546b41-3224-4db7-9f9f-56f019b9c79e","keyName":"e2e-sub-iso-36bca0","subscription":"e2e-a-only-98955f","tenant":"e2e-shared-a-8c4427","userId":"0d546b41-3224-4db7-9f9f-56f019b9c79e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/sub-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-98955f"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a5b5d49-6043-4ead-a814-b98e3a34cacb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55382","PortSpecifier":{"PortValue":55382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55382","PortSpecifier":{"PortValue":55382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503942,"nanos":350249393},"http":{"id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","method":"GET","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uQWoGHX8KFRUTlQc_oBsYTPRTlfjYcQTBjvT7ZApSmopNFCBBQ5QSCrOAHiH"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uQWoGHX8KFRUTlQc_oBsYTPRTlfjYcQTBjvT7ZApSmopNFCBBQ5QSCrOAHiH\"}"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e8376a7-88ab-4c4a-8a92-e12c25f17e77","keyName":"e2e-sub-iso-ff4e13","subscription":"e2e-b-only-98955f","tenant":"e2e-shared-b-f0ff0b","userId":"1e8376a7-88ab-4c4a-8a92-e12c25f17e77","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/sub-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-98955f"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb9059c3-a428-468c-bb7b-e2197be4fe47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15029316-b60b-487b-aaa9-9af776281d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59138","PortSpecifier":{"PortValue":59138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15029316-b60b-487b-aaa9-9af776281d6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15029316-b60b-487b-aaa9-9af776281d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59138","PortSpecifier":{"PortValue":59138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503959,"nanos":6985440},"http":{"id":"15029316-b60b-487b-aaa9-9af776281d6a","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15029316-b60b-487b-aaa9-9af776281d6a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15029316-b60b-487b-aaa9-9af776281d6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/sub-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15029316-b60b-487b-aaa9-9af776281d6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15029316-b60b-487b-aaa9-9af776281d6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15029316-b60b-487b-aaa9-9af776281d6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503959,"nanos":43574813},"http":{"id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/sub-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70af51c6-15e9-4ba7-8a38-6b337790c6f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59152","PortSpecifier":{"PortValue":59152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4040395-5472-4b61-b26e-f7b26d787e81","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59152","PortSpecifier":{"PortValue":59152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503959,"nanos":84853885},"http":{"id":"f4040395-5472-4b61-b26e-f7b26d787e81","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RUaVDURE5wbFH39d_9IawtbKM7KfVcaUGy3vpZW3F4lbGh1OvYa7lNWezU4B"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RUaVDURE5wbFH39d_9IawtbKM7KfVcaUGy3vpZW3F4lbGh1OvYa7lNWezU4B\"}"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca586b06-6ca9-4e2b-b1fa-f52655f698c6","keyName":"e2e-sub-iso-3de967","subscription":"e2e-shared-sub-1cf274","tenant":"e2e-shared-a-8c4427","userId":"ca586b06-6ca9-4e2b-b1fa-f52655f698c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/sub-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1cf274"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4040395-5472-4b61-b26e-f7b26d787e81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33130","PortSpecifier":{"PortValue":33130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1092699e-fd06-4289-9ee3-32e1797e19dc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33130","PortSpecifier":{"PortValue":33130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783503959,"nanos":113801323},"http":{"id":"1092699e-fd06-4289-9ee3-32e1797e19dc","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14ZB3Hju4xWfyrnhy_O7nNyXtM1C983N327659T2MfdmI4zcHfInRfJtkLsrC"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14ZB3Hju4xWfyrnhy_O7nNyXtM1C983N327659T2MfdmI4zcHfInRfJtkLsrC\"}"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f31de7f-869a-43fc-af42-1e8845c00b24","keyName":"e2e-sub-iso-da0061","subscription":"e2e-shared-sub-1cf274","tenant":"e2e-shared-b-f0ff0b","userId":"4f31de7f-869a-43fc-af42-1e8845c00b24","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/sub-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1cf274"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:45:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1092699e-fd06-4289-9ee3-32e1797e19dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/344b2927d92b3dd26658153e2fb21bbfd77046edf8a02ce7a75f2a0fc511ce89"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c9bfe0c96fc98f0ffe3bfbd294fa3cd484ef65129a6b73ff4a844cdb1a22ec5"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f20a100b74d0256008b68d7850e77ba7c500310953d2a3d89a809419b128b19c"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd070b1e94b55cc0c78f0fb7c6cf5739e8bda2fba0cabd8d0c2655c3729f35a7"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad4073a674ea89da4784b97260f276a43e88818a76acb34dcbe9be6be4fd1fb9"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1fc60f5faac13daf0ce8417d959b0969c1ddcf78a25c1218bd79d75ce17cebf"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7fbc5fb88d8d0d7b26e30230b4eaf79f9296141efd91a5a2b8505cf5d12db02"} {"level":"info","ts":"2026-07-08T09:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c46ca5f85019c92690ed160d28f02861a60739e95ccf868139fdbad90a22f05"} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"error","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"info","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abebf15fa37972ae4e156a7c8e34c5b1505dfdb068fe957192e2e7e2f8330e80"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/041b404a94c19ebcae4f1776503e83414f0e8cd92696ae7863a3f59dff83f5df"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e28da9bce67d7c3ea4a0c23c379788b7460ebd765dc20bba3e3af5a63453965b"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f7de90d182b7f0a0afebb3c722e1333465c07b9072efa5ecb8b6b83d24cb6c0"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec465eb3755a1849c342bb0e309756ee5134be1b6f42fd6b400ab610d274bd02"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/142603a25b66bd9a885caa11e4e85e2d86e4248116e4e06066147247437e6af0"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f463ea4a90922dd511c06ffe75ca51e1f06fc836a15af9f814a97fd938993650"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d6abd48c87f42680a3259af3ea13cd45153014a02dd02f94f7ea92af82fc7db"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:46:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"} {"level":"info","ts":"2026-07-08T09:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"error","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"error","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"} {"level":"error","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"} {"level":"error","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1"} {"level":"info","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8"} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"error","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"} {"level":"info","ts":"2026-07-08T09:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3"} {"level":"error","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"error","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T09:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"info","ts":"2026-07-08T09:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45210","PortSpecifier":{"PortValue":45210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24896238-de1f-49f1-976b-ec34ef3ee78d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45210","PortSpecifier":{"PortValue":45210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504050,"nanos":733204308},"http":{"id":"24896238-de1f-49f1-976b-ec34ef3ee78d","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24896238-de1f-49f1-976b-ec34ef3ee78d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44658","PortSpecifier":{"PortValue":44658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f6d9383-85f5-4543-9af0-40f0631effe2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44658","PortSpecifier":{"PortValue":44658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504050,"nanos":780989900},"http":{"id":"2f6d9383-85f5-4543-9af0-40f0631effe2","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f6d9383-85f5-4543-9af0-40f0631effe2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45222","PortSpecifier":{"PortValue":45222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","method":"POST","path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45222","PortSpecifier":{"PortValue":45222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504050,"nanos":828097233},"http":{"id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VewPUUBk4A9luFV8_4rBdjsAAGbGDQT9O1RqceEOcdy7jYyYBz5LTSJwkLuE"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VewPUUBk4A9luFV8_4rBdjsAAGbGDQT9O1RqceEOcdy7jYyYBz5LTSJwkLuE\"}"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","keyName":"e2e-rate-a-34efba","subscription":"e2e-rate-iso-a-34efba","tenant":"e2e-shared-a-8c4427","userId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\",\"requestedSubscription\":\"e2e-rate-iso-a-34efba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-34efba","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-34efba"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","keyName":"e2e-rate-a-34efba","selected_subscription":"e2e-rate-iso-a-34efba","selected_subscription_key":"ai-tenant-e2e-shared-a-8c4427/e2e-rate-iso-a-34efba@ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-34efba","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d0ebf5-bd01-4732-8478-bc2abe6466c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46264","PortSpecifier":{"PortValue":46264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","method":"POST","path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46264","PortSpecifier":{"PortValue":46264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504051,"nanos":889438713},"http":{"id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VewPUUBk4A9luFV8_4rBdjsAAGbGDQT9O1RqceEOcdy7jYyYBz5LTSJwkLuE"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VewPUUBk4A9luFV8_4rBdjsAAGbGDQT9O1RqceEOcdy7jYyYBz5LTSJwkLuE\"}"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","keyName":"e2e-rate-a-34efba","subscription":"e2e-rate-iso-a-34efba","tenant":"e2e-shared-a-8c4427","userId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\",\"requestedSubscription\":\"e2e-rate-iso-a-34efba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-34efba","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-34efba"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","keyName":"e2e-rate-a-34efba","selected_subscription":"e2e-rate-iso-a-34efba","selected_subscription_key":"ai-tenant-e2e-shared-a-8c4427/e2e-rate-iso-a-34efba@ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-34efba","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fdca481-bd58-4efa-8e11-53ae10d0aedd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46266","PortSpecifier":{"PortValue":46266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","method":"POST","path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46266","PortSpecifier":{"PortValue":46266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504052,"nanos":929734966},"http":{"id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VewPUUBk4A9luFV8_4rBdjsAAGbGDQT9O1RqceEOcdy7jYyYBz5LTSJwkLuE"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VewPUUBk4A9luFV8_4rBdjsAAGbGDQT9O1RqceEOcdy7jYyYBz5LTSJwkLuE\"}"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","keyName":"e2e-rate-a-34efba","subscription":"e2e-rate-iso-a-34efba","tenant":"e2e-shared-a-8c4427","userId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\",\"requestedSubscription\":\"e2e-rate-iso-a-34efba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-34efba","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-34efba"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2f2911d8-a9b8-4872-ab2d-5e66f17f9558","keyName":"e2e-rate-a-34efba","selected_subscription":"e2e-rate-iso-a-34efba","selected_subscription_key":"ai-tenant-e2e-shared-a-8c4427/e2e-rate-iso-a-34efba@ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-34efba","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352b2175-d4f0-4288-9fce-f9f3915bbb73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33530","PortSpecifier":{"PortValue":33530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33530","PortSpecifier":{"PortValue":33530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504063,"nanos":872075561},"http":{"id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0283bbe8-f812-4cf6-a7af-8f70ec18d2b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38468","PortSpecifier":{"PortValue":38468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2120c27-881a-487e-ad67-f7cf232af2b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38468","PortSpecifier":{"PortValue":38468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504063,"nanos":914219292},"http":{"id":"b2120c27-881a-487e-ad67-f7cf232af2b5","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56fd3954-9d50-4663-9e97-99736c450ec4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"]}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/385166a34823"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48afafe3-0a34-4a38-9aa5-5ef4fe82df16"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56fd3954-9d50-4663-9e97-99736c450ec4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2120c27-881a-487e-ad67-f7cf232af2b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33544","PortSpecifier":{"PortValue":33544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","method":"POST","path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33544","PortSpecifier":{"PortValue":33544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504063,"nanos":956155706},"http":{"id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RXFahdmYS4k2Ic0G_uRSIRaMKSTtGFA2dnXtUsMygi2adrl89byqnYB7Y0Yp"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RXFahdmYS4k2Ic0G_uRSIRaMKSTtGFA2dnXtUsMygi2adrl89byqnYB7Y0Yp\"}"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d67a059-6501-4557-8ecd-b9537f321ce4","keyName":"e2e-rate-a-929d99","subscription":"e2e-rate-iso-a-929d99","tenant":"e2e-shared-a-8c4427","userId":"0d67a059-6501-4557-8ecd-b9537f321ce4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\",\"requestedSubscription\":\"e2e-rate-iso-a-929d99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-929d99","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-929d99"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d67a059-6501-4557-8ecd-b9537f321ce4","keyName":"e2e-rate-a-929d99","selected_subscription":"e2e-rate-iso-a-929d99","selected_subscription_key":"ai-tenant-e2e-shared-a-8c4427/e2e-rate-iso-a-929d99@ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-929d99","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c5dc13a-c3c8-43eb-a55d-eb55b375bafe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33554","PortSpecifier":{"PortValue":33554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87f40ac3-ac31-4116-a3c9-a26110e55967","method":"POST","path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33554","PortSpecifier":{"PortValue":33554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504064,"nanos":996670323},"http":{"id":"87f40ac3-ac31-4116-a3c9-a26110e55967","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RXFahdmYS4k2Ic0G_uRSIRaMKSTtGFA2dnXtUsMygi2adrl89byqnYB7Y0Yp"} {"level":"debug","ts":"2026-07-08T09:47:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RXFahdmYS4k2Ic0G_uRSIRaMKSTtGFA2dnXtUsMygi2adrl89byqnYB7Y0Yp\"}"} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d67a059-6501-4557-8ecd-b9537f321ce4","keyName":"e2e-rate-a-929d99","subscription":"e2e-rate-iso-a-929d99","tenant":"e2e-shared-a-8c4427","userId":"0d67a059-6501-4557-8ecd-b9537f321ce4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\",\"requestedSubscription\":\"e2e-rate-iso-a-929d99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-929d99","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-929d99"} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d67a059-6501-4557-8ecd-b9537f321ce4","keyName":"e2e-rate-a-929d99","selected_subscription":"e2e-rate-iso-a-929d99","selected_subscription_key":"ai-tenant-e2e-shared-a-8c4427/e2e-rate-iso-a-929d99@ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-929d99","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f40ac3-ac31-4116-a3c9-a26110e55967","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33564","PortSpecifier":{"PortValue":33564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","method":"POST","path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions","host":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33564","PortSpecifier":{"PortValue":33564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504066,"nanos":34401798},"http":{"id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","method":"POST","headers":{":authority":"e2e-shared-a-8c4427.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RXFahdmYS4k2Ic0G_uRSIRaMKSTtGFA2dnXtUsMygi2adrl89byqnYB7Y0Yp"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RXFahdmYS4k2Ic0G_uRSIRaMKSTtGFA2dnXtUsMygi2adrl89byqnYB7Y0Yp\"}"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d67a059-6501-4557-8ecd-b9537f321ce4","keyName":"e2e-rate-a-929d99","subscription":"e2e-rate-iso-a-929d99","tenant":"e2e-shared-a-8c4427","userId":"0d67a059-6501-4557-8ecd-b9537f321ce4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\",\"requestedSubscription\":\"e2e-rate-iso-a-929d99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c4427.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-929d99","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-929d99"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d67a059-6501-4557-8ecd-b9537f321ce4","keyName":"e2e-rate-a-929d99","selected_subscription":"e2e-rate-iso-a-929d99","selected_subscription_key":"ai-tenant-e2e-shared-a-8c4427/e2e-rate-iso-a-929d99@ai-tenant-e2e-shared-a-8c4427/rate-test-model-8c4427","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c4427","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-929d99","namespace":"ai-tenant-e2e-shared-a-8c4427","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34cd1195-02a5-451d-b44c-47c08fc2c5d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38470","PortSpecifier":{"PortValue":38470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb1a4754-2d48-49ed-96b0-877a76975f92","method":"POST","path":"/ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b/v1/completions","host":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38470","PortSpecifier":{"PortValue":38470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783504066,"nanos":71943357},"http":{"id":"bb1a4754-2d48-49ed-96b0-877a76975f92","method":"POST","headers":{":authority":"e2e-shared-b-f0ff0b.apps.9c52ed7a-e937-4933-8883-385166a34823.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BUmRPmPTl85NL0fo_82ZnY1xTQH0eQCet8Ei8ukfut7OctZLGe4rsq0t53Cy"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BUmRPmPTl85NL0fo_82ZnY1xTQH0eQCet8Ei8ukfut7OctZLGe4rsq0t53Cy\"}"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2bae721e-2467-41f6-9736-a0d507bb269d","keyName":"e2e-rate-b-929d99","subscription":"e2e-rate-iso-b-929d99","tenant":"e2e-shared-b-f0ff0b","userId":"2bae721e-2467-41f6-9736-a0d507bb269d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b\",\"requestedSubscription\":\"e2e-rate-iso-b-929d99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f0ff0b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f0ff0b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-929d99","namespace":"ai-tenant-e2e-shared-b-f0ff0b","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-929d99"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2bae721e-2467-41f6-9736-a0d507bb269d","keyName":"e2e-rate-b-929d99","selected_subscription":"e2e-rate-iso-b-929d99","selected_subscription_key":"ai-tenant-e2e-shared-b-f0ff0b/e2e-rate-iso-b-929d99@ai-tenant-e2e-shared-b-f0ff0b/rate-test-model-f0ff0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f0ff0b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-929d99","namespace":"ai-tenant-e2e-shared-b-f0ff0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-08T09:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb1a4754-2d48-49ed-96b0-877a76975f92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-08T09:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6874521245a91967e90ccea68fce934f84e35b22829a8b758adb54e15919cd4"} {"level":"info","ts":"2026-07-08T09:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be98759e99a9ca21dde702ff8540871ec47ceed3163b45f24f5fac5ef4700fb"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669004df25f13b4fe07678098eba8b63e70302620b0565bb4d0041e508b878d8"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a5f5ce35452b8200fe1a36951e84eb2a1e3d4f0aed2a076028ae158de13362"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8141b162357b25dbbd038210c1d177cffa34e4b89d4cab48c1ee11f6a9890b8"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48ae68135d9cd5816a78d21280c73667ae1376f040d6bb7a6b1e2cb920f07dc8"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df579b0d25af94602ec60209930b0cce9e8ce5c55875562313aa6cdd6debbac9"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/608c7435b65be8009519476875672a54f3e5b4d167e60b12fd960e3986bc7c0b"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80859271b4cd0009c954ef029bcd70a261cf09d5b0cd91767dcc8404828d0dd2"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bde547e46a539592c14a8940c289841c08d05dd0c28ee261238ca7e3ae492856"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e391b6a076e5779cd5fd3fac1d40f36f5b6914f071ef7ab0c256cbfe0cbe140a"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0facca16839cae613b17792242986b635f4115ef71fb59d22f18a54be294dfb7"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3978011e4132cc5917b785a1a5ec8f46fcdd474fef4fad3e8b9f7e65764469f3"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df36447ad93dbf754a72d4ed6895e048c77a83e1238eb751c2fef636ea7468c1"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe0dfbb51ae808ebdc086d451754773d2672e72b2a2d02c6b2b305c51c3b5582"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25cf3b6fb955376fd7708531e4e1525dc0bf224c18c7fb5a4099d29603924bd3"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/645a0cb359ba33329150f19aa75584c712da892b49e6b91658f8f64a0d4126d4"} {"level":"info","ts":"2026-07-08T09:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27dcc56e0783a31e5d4f443d4b0d32c3c3332fde4d783ccc2f403cb3379990c7"} {"level":"info","ts":"2026-07-08T09:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/163bd302b2fd64d7515d482d25a0b94ef72f42ac021e9ba521e5df7fb4fc7186"} {"level":"info","ts":"2026-07-08T09:48:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95c1a2058aeff410e007b8df7f4bcb1819233fc7e559affdd0f39b6602f85c30"}