--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873cffb7ecf9d34d8c0e5d4c43576f2595d04f1f9b6ee6e3caa87633ba1b2c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a"} {"level":"debug","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873cffb7ecf9d34d8c0e5d4c43576f2595d04f1f9b6ee6e3caa87633ba1b2c00"} {"level":"info","ts":"2026-07-06T17:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a"} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db"} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db"} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db"} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:09:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:09:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"info","ts":"2026-07-06T17:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873cffb7ecf9d34d8c0e5d4c43576f2595d04f1f9b6ee6e3caa87633ba1b2c00"} {"level":"info","ts":"2026-07-06T17:09:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d79508a63c2a39cc7d5a2cf0ad08605b9f47b2e813e54ca32da97c9963b169a"} {"level":"info","ts":"2026-07-06T17:09:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f046b008f6b2ed68b1d3f0969af815ec50619f0e50a23f0e9f39ce2c5d233db"} {"level":"info","ts":"2026-07-06T17:09:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/942147848590e30825dbc8916e015ae609c1cb821de4ca61f188702acd85daae"} {"level":"debug","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c"} {"level":"debug","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c"} {"level":"debug","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"error","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601"} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4"} {"level":"debug","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2"} {"level":"info","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5"} {"level":"debug","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4"} {"level":"info","ts":"2026-07-06T17:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2"} {"level":"debug","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1"} {"level":"debug","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1"} {"level":"debug","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:10:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362"} {"level":"info","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12"} {"level":"debug","ts":"2026-07-06T17:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:53916","PortSpecifier":{"PortValue":53916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:53916","PortSpecifier":{"PortValue":53916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357856,"nanos":66240900},"http":{"id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"476bb9e7-a16c-420b-bf2a-2a5c84550952","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56644","PortSpecifier":{"PortValue":56644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03fbc804-293f-4589-ada5-36164bf4aaff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56644","PortSpecifier":{"PortValue":56644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357856,"nanos":133823896},"http":{"id":"03fbc804-293f-4589-ada5-36164bf4aaff","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03fbc804-293f-4589-ada5-36164bf4aaff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"772e1f30-7bcb-4819-943b-3beeba580168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:53926","PortSpecifier":{"PortValue":53926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"772e1f30-7bcb-4819-943b-3beeba580168","method":"GET","path":"/maas-api/v1/api-keys/4ea915c6-a2c2-4166-9557-6ab54af72535","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"772e1f30-7bcb-4819-943b-3beeba580168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:53926","PortSpecifier":{"PortValue":53926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357856,"nanos":228848710},"http":{"id":"772e1f30-7bcb-4819-943b-3beeba580168","method":"GET","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ea915c6-a2c2-4166-9557-6ab54af72535",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"772e1f30-7bcb-4819-943b-3beeba580168","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"772e1f30-7bcb-4819-943b-3beeba580168","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ea915c6-a2c2-4166-9557-6ab54af72535",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"772e1f30-7bcb-4819-943b-3beeba580168","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"772e1f30-7bcb-4819-943b-3beeba580168","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"772e1f30-7bcb-4819-943b-3beeba580168","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56648","PortSpecifier":{"PortValue":56648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53a4e833-499f-484d-a7f9-bacd6828eaab","method":"GET","path":"/maas-api/v1/api-keys/f12659ed-099f-4dad-a5f0-1d9e15745ae3","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56648","PortSpecifier":{"PortValue":56648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357856,"nanos":270217525},"http":{"id":"53a4e833-499f-484d-a7f9-bacd6828eaab","method":"GET","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f12659ed-099f-4dad-a5f0-1d9e15745ae3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f12659ed-099f-4dad-a5f0-1d9e15745ae3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:10:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53a4e833-499f-484d-a7f9-bacd6828eaab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db01c0e6-ca88-4754-b745-37202024eff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:35290","PortSpecifier":{"PortValue":35290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db01c0e6-ca88-4754-b745-37202024eff3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db01c0e6-ca88-4754-b745-37202024eff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:35290","PortSpecifier":{"PortValue":35290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357871,"nanos":418358823},"http":{"id":"db01c0e6-ca88-4754-b745-37202024eff3","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db01c0e6-ca88-4754-b745-37202024eff3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db01c0e6-ca88-4754-b745-37202024eff3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db01c0e6-ca88-4754-b745-37202024eff3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db01c0e6-ca88-4754-b745-37202024eff3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db01c0e6-ca88-4754-b745-37202024eff3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57952","PortSpecifier":{"PortValue":57952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57952","PortSpecifier":{"PortValue":57952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357871,"nanos":459978405},"http":{"id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c91939-55d6-4989-bb9c-8c0eada5a87f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a029d9-f76b-46de-b789-809918a7e364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:35292","PortSpecifier":{"PortValue":35292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a029d9-f76b-46de-b789-809918a7e364","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a029d9-f76b-46de-b789-809918a7e364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:35292","PortSpecifier":{"PortValue":35292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357871,"nanos":499594080},"http":{"id":"45a029d9-f76b-46de-b789-809918a7e364","method":"GET","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TMyAXZ9ybCjqE4rL_Sr8taNb4ZHSyRoEwigw7RrAWxr4d3cj3HcQ8FDhfStN"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TMyAXZ9ybCjqE4rL_Sr8taNb4ZHSyRoEwigw7RrAWxr4d3cj3HcQ8FDhfStN\"}"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"538ee7b1-db26-4684-8108-437e46df37bb","keyName":"e2e-auth-iso-a-4be683","subscription":"e2e-auth-iso-4119a8","tenant":"e2e-shared-a-0874ce","userId":"538ee7b1-db26-4684-8108-437e46df37bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a029d9-f76b-46de-b789-809918a7e364","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4119a8"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a029d9-f76b-46de-b789-809918a7e364","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a029d9-f76b-46de-b789-809918a7e364","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a029d9-f76b-46de-b789-809918a7e364","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:36030","PortSpecifier":{"PortValue":36030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:36030","PortSpecifier":{"PortValue":36030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357886,"nanos":603761993},"http":{"id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcc6198-cbfc-47e3-a72f-9ccaacfd78a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:42810","PortSpecifier":{"PortValue":42810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:42810","PortSpecifier":{"PortValue":42810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357886,"nanos":648627471},"http":{"id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ec8539-55ba-47ca-8af9-fa8908dd8104","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:42816","PortSpecifier":{"PortValue":42816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:42816","PortSpecifier":{"PortValue":42816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357886,"nanos":699162386},"http":{"id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","method":"GET","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5lK9NYmYrLs2NNSA_dV7x4aXAVWG9VbCraRdarJme1fuNhQ7uj9lBT580W1v"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5lK9NYmYrLs2NNSA_dV7x4aXAVWG9VbCraRdarJme1fuNhQ7uj9lBT580W1v\"}"} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T17:11:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"850bbfa9-5ee8-432a-b89b-019ef7c4d938","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71a04355-089c-429b-9313-6adf66925a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57124","PortSpecifier":{"PortValue":57124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71a04355-089c-429b-9313-6adf66925a71","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71a04355-089c-429b-9313-6adf66925a71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57124","PortSpecifier":{"PortValue":57124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357904,"nanos":73632258},"http":{"id":"71a04355-089c-429b-9313-6adf66925a71","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71a04355-089c-429b-9313-6adf66925a71","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71a04355-089c-429b-9313-6adf66925a71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a04355-089c-429b-9313-6adf66925a71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71a04355-089c-429b-9313-6adf66925a71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71a04355-089c-429b-9313-6adf66925a71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:45970","PortSpecifier":{"PortValue":45970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31d5e151-61fc-462c-be90-729cc1c5712b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:45970","PortSpecifier":{"PortValue":45970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357904,"nanos":109806518},"http":{"id":"31d5e151-61fc-462c-be90-729cc1c5712b","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d5e151-61fc-462c-be90-729cc1c5712b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57128","PortSpecifier":{"PortValue":57128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:57128","PortSpecifier":{"PortValue":57128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357904,"nanos":147578696},"http":{"id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25414b6e-fc3e-4558-8db1-8c388e0474ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:45976","PortSpecifier":{"PortValue":45976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8638323-5002-45f1-8cc2-63745ad6b694","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:45976","PortSpecifier":{"PortValue":45976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357904,"nanos":210575974},"http":{"id":"e8638323-5002-45f1-8cc2-63745ad6b694","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:11:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8638323-5002-45f1-8cc2-63745ad6b694","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58512","PortSpecifier":{"PortValue":58512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58512","PortSpecifier":{"PortValue":58512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357925,"nanos":735079377},"http":{"id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b4dd1ad-4655-4bf8-9ab9-442e2999d63a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357925,"nanos":773369214},"http":{"id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bfd39e2-5c07-4356-b71d-70c47dd6d675","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58308","PortSpecifier":{"PortValue":58308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","method":"GET","path":"/maas-api/v1/api-keys/aaf2e8da-6425-4480-b757-abeea75f4855","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58308","PortSpecifier":{"PortValue":58308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357925,"nanos":811453822},"http":{"id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","method":"GET","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf2e8da-6425-4480-b757-abeea75f4855",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf2e8da-6425-4480-b757-abeea75f4855",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"535ba0ab-ccb3-4ff0-ab5d-282afcf0a3cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58522","PortSpecifier":{"PortValue":58522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","method":"GET","path":"/maas-api/v1/api-keys/aaf2e8da-6425-4480-b757-abeea75f4855","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58522","PortSpecifier":{"PortValue":58522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357925,"nanos":846290472},"http":{"id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","method":"GET","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf2e8da-6425-4480-b757-abeea75f4855",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/aaf2e8da-6425-4480-b757-abeea75f4855",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b9d2ae7-0732-41d1-8708-06cfe7f180a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56044","PortSpecifier":{"PortValue":56044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e665b97-d14b-49f2-961d-c8ba38980386","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56044","PortSpecifier":{"PortValue":56044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357940,"nanos":843550953},"http":{"id":"6e665b97-d14b-49f2-961d-c8ba38980386","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e665b97-d14b-49f2-961d-c8ba38980386","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2841779-11f9-49d6-8fc7-c6a067405876","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357940,"nanos":883595636},"http":{"id":"b2841779-11f9-49d6-8fc7-c6a067405876","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/auth-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2841779-11f9-49d6-8fc7-c6a067405876","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56050","PortSpecifier":{"PortValue":56050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56050","PortSpecifier":{"PortValue":56050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783357940,"nanos":919347852},"http":{"id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wIeWqKUp8CUQzsfG_OyF7RJm0p9B3RIrnIOO1QHe54CvXE2oTGlAOi0wpAD2"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wIeWqKUp8CUQzsfG_OyF7RJm0p9B3RIrnIOO1QHe54CvXE2oTGlAOi0wpAD2\"}"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7610241a-12d2-46b3-b977-6937319d76d1","keyName":"e2e-auth-iso-a-4c2962","subscription":"e2e-auth-iso-a1a69c","tenant":"e2e-shared-a-0874ce","userId":"7610241a-12d2-46b3-b977-6937319d76d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/auth-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a1a69c"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:12:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e5c8044-6136-43e9-a81a-7e608f670dd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5cd012f044928b50cccee1b6715d8d16e9d3c94b9bd73ed6de40302f918cecd"} {"level":"info","ts":"2026-07-06T17:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ca417aa30783cbdd684bab9e834e4b325d6244cfa07acfe7e1f4b11e7e94123"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c3da4e33892506fe0b0985a4134ae379ae9b1ad60f8e85db61c66180cfbdda1"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c0dbbbe6058e86a08f5272bbcc3f2e9eebb85f187cd75070ca991ff7b686e8c"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f5bb15840f356410b5dbb9cfb587c36ce719ad778b21a677ea6b2184e2f70e4"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0e1514c9fd584688027f64a29e0593fc08f70fa35041598fc588d0b8627af12"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdb2bd34fd60fe156707cb1a2a04328722b3f5a8ffea7ed1ec4bc6b9b9eb4601"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03d6c817a0211a2ad65505fc54d0149a92519de4924563a36469f82508610c2a"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e231d748beba558cc9838f3a8d005af8fcce54f1e058691a9ff691c7bfa429ca"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68cf21596adc415065b33520831fbf9b67d8f5a6e11617d6b262e9cb51c5ad5"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5509db87c73c01dc8ff4ad4a8bb0942a7d8bd33ebea3bf2dbeb1c0cdd478f9b2"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7913bace0b0f3b067bc02cfe3e9f72369ae2f05856457c6dd5f2497b985a990"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97ff0466fd2c42d7c2c59a1aaeb6fbea3fefe494521606f08bdc2c404c38e3b"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01625e73b9eddacb0187303577ca08fcec0920d02f5b531e1e4453614550f362"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69185b1dba839a0a7808776938f4871bb2e6cc9e118cc43bc04819705e190019"} {"level":"info","ts":"2026-07-06T17:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19069d4aa1e809229140a8e50493660b463159de84274e7b39d77ca5c6ae023e"} {"level":"debug","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"} {"level":"debug","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"} {"level":"debug","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"error","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5"} {"level":"error","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"} {"level":"debug","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:12:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:12:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab"} {"level":"info","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab"} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75"} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918"} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918"} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c"} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"215534c316322bba4652681936f33736f31580863834fa25238572430ed79681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"} {"level":"debug","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"debug","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45117a96-356f-4bdb-bf46-858fe277961c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34488","PortSpecifier":{"PortValue":34488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45117a96-356f-4bdb-bf46-858fe277961c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45117a96-356f-4bdb-bf46-858fe277961c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34488","PortSpecifier":{"PortValue":34488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358003,"nanos":801884231},"http":{"id":"45117a96-356f-4bdb-bf46-858fe277961c","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45117a96-356f-4bdb-bf46-858fe277961c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45117a96-356f-4bdb-bf46-858fe277961c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/sub-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45117a96-356f-4bdb-bf46-858fe277961c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45117a96-356f-4bdb-bf46-858fe277961c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45117a96-356f-4bdb-bf46-858fe277961c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:38330","PortSpecifier":{"PortValue":38330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:38330","PortSpecifier":{"PortValue":38330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358003,"nanos":847672748},"http":{"id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/sub-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f55fa9f-dcdc-4724-8b9a-61d65f619df1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34502","PortSpecifier":{"PortValue":34502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:34502","PortSpecifier":{"PortValue":34502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358003,"nanos":891812209},"http":{"id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","method":"GET","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pU1QmoRuLmV8GKFc_Y5CYcRqB6kXEoj8GvTR55CrmX4vmIxWdlKkchdsl03b"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pU1QmoRuLmV8GKFc_Y5CYcRqB6kXEoj8GvTR55CrmX4vmIxWdlKkchdsl03b\"}"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"09b4d30a-448b-42bb-a874-5ee74c9e4633","keyName":"e2e-sub-iso-0e701e","subscription":"e2e-a-only-3fd4d4","tenant":"e2e-shared-a-0874ce","userId":"09b4d30a-448b-42bb-a874-5ee74c9e4633","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/sub-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-3fd4d4"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d2b0c02-c568-47ce-9366-6c54d59382eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:38346","PortSpecifier":{"PortValue":38346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:38346","PortSpecifier":{"PortValue":38346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358003,"nanos":934183708},"http":{"id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","method":"GET","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11dgPDFHj18z9yHAA_GRJBR1zwpP6OIkOvL6EwpTYDiTt5YNVLSAOFTZCRA2M"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11dgPDFHj18z9yHAA_GRJBR1zwpP6OIkOvL6EwpTYDiTt5YNVLSAOFTZCRA2M\"}"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31ac4fde-9cc2-4415-9191-f2bbe854f6a8","keyName":"e2e-sub-iso-e34a86","subscription":"e2e-b-only-3fd4d4","tenant":"e2e-shared-b-d073f6","userId":"31ac4fde-9cc2-4415-9191-f2bbe854f6a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/sub-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-3fd4d4"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a8f852b-9d97-47f2-a7d7-bf6e9466e21a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:39022","PortSpecifier":{"PortValue":39022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:39022","PortSpecifier":{"PortValue":39022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358022,"nanos":645596496},"http":{"id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/sub-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc75ed5-48ff-49a5-9be0-28af737fd1ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33538","PortSpecifier":{"PortValue":33538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33538","PortSpecifier":{"PortValue":33538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358022,"nanos":689848524},"http":{"id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/sub-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e31f2a88-7e3d-4835-80ad-3a715c0c39c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:39032","PortSpecifier":{"PortValue":39032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:39032","PortSpecifier":{"PortValue":39032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358022,"nanos":740123438},"http":{"id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cnDKUd82OeGvpMbm_IRkfGr9aTxeHjN8H8PFbrHavTYeU31ClDU3jg0jnpYK"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cnDKUd82OeGvpMbm_IRkfGr9aTxeHjN8H8PFbrHavTYeU31ClDU3jg0jnpYK\"}"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebbe47e-9f4f-4c29-92c5-7eb9f58a5f2d","keyName":"e2e-sub-iso-98d5e1","subscription":"e2e-shared-sub-1688ff","tenant":"e2e-shared-a-0874ce","userId":"0ebbe47e-9f4f-4c29-92c5-7eb9f58a5f2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/sub-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1688ff"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cb7be40-f9ca-4844-90ca-975dc6eaf91b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33542","PortSpecifier":{"PortValue":33542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:33542","PortSpecifier":{"PortValue":33542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358022,"nanos":773318809},"http":{"id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16BBUYC7oCau6sohF_LiHyKSsYhSmP5S62mXAn2z5DpiOiAQa2VpBKeBsvH4m"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16BBUYC7oCau6sohF_LiHyKSsYhSmP5S62mXAn2z5DpiOiAQa2VpBKeBsvH4m\"}"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c4813f28-3047-4ebc-8303-d7dd867496b5","keyName":"e2e-sub-iso-73a67d","subscription":"e2e-shared-sub-1688ff","tenant":"e2e-shared-b-d073f6","userId":"c4813f28-3047-4ebc-8303-d7dd867496b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/sub-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1688ff"} {"level":"info","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:13:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ade5b85-c6e4-4ce5-ba26-3494bfcc9bd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3261f3e08fe5551a58c8a943e49dcd11a60164d4e85ee8b8630686d8e7d73e1d"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c859511d38027046e3185aba6b3bade5e4e4d87f1b36f2829cf0b87d64fd75"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3889774583cf2497e71916343eb321c976de0d5364df3adf86afc08967b658c"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f32d0e43d59cc241c59ee848b657f79f306f5516eb027197eea9e0e269c267c"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b47e0e8c979b68d562a1ffe47c9bb8f23e7bb90f98efed6d636c2e6c429e6882"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a813393dda323cede3d23f03865f7d8cd3f6052bafc4f26c924e873d84f918"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13c5bc8cf484564670224baeb0e18dbe1ea62587e5428d03dba927e39fa125c"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd3dea4a54c63b7752b7fe09fa248985b550cf56cb0bd53b5effbc39a0d7ebc"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ae993a56814e4da8fa305b7a80ddc339057d9be2cb391210c554098a38f3d5f"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/215534c316322bba4652681936f33736f31580863834fa25238572430ed79681"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f19ae6bc69fcbbd4a73582ee5281014594357f91c48cbb959c8a35a441c9c64"} {"level":"info","ts":"2026-07-06T17:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65067889258aa8169e917a180d0acfac4f79210b4e4d62972c80db5d9f1ff6ab"} {"level":"info","ts":"2026-07-06T17:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d85b6aa111b13ce0a1209a8af448c6953a985cdfaba4bc151fc959604dc3acf5"} {"level":"info","ts":"2026-07-06T17:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/553cc7f2abfcfc695f9eb5fae437fed95973e355a9f80aa978782b8b222cfc9b"} {"level":"info","ts":"2026-07-06T17:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fc5c69c7e3bbf6a0ad6fd8738c110fa18937b41c09765fdb093bedefb092d61"} {"level":"info","ts":"2026-07-06T17:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81b6353d093fb011d0c26cf85505caa7ab36c954b459bd1e50deaa742fc59766"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70"} {"level":"debug","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e"} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e"} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e"} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"error","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c"} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:14:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"} {"level":"info","ts":"2026-07-06T17:14:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"error","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"error","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:15:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e"} {"level":"debug","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"info","ts":"2026-07-06T17:15:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"info","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50694","PortSpecifier":{"PortValue":50694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95047068-803d-4428-8b2d-828ef9dbeaba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50694","PortSpecifier":{"PortValue":50694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358103,"nanos":894704349},"http":{"id":"95047068-803d-4428-8b2d-828ef9dbeaba","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95047068-803d-4428-8b2d-828ef9dbeaba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff004091-7780-4e5e-87bf-e493580f1022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47978","PortSpecifier":{"PortValue":47978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff004091-7780-4e5e-87bf-e493580f1022","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff004091-7780-4e5e-87bf-e493580f1022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47978","PortSpecifier":{"PortValue":47978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358103,"nanos":944251796},"http":{"id":"ff004091-7780-4e5e-87bf-e493580f1022","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff004091-7780-4e5e-87bf-e493580f1022","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff004091-7780-4e5e-87bf-e493580f1022","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff004091-7780-4e5e-87bf-e493580f1022","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff004091-7780-4e5e-87bf-e493580f1022","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff004091-7780-4e5e-87bf-e493580f1022","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50704","PortSpecifier":{"PortValue":50704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a4a9551-27ef-4e55-927a-b623d1402d00","method":"POST","path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50704","PortSpecifier":{"PortValue":50704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358103,"nanos":991682531},"http":{"id":"4a4a9551-27ef-4e55-927a-b623d1402d00","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y1M1GEIhJo6NooMd_9iFKTA2OalZwdoUlE5f00TFc5MYeK5cFA8hMF3cnuj3"} {"level":"debug","ts":"2026-07-06T17:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y1M1GEIhJo6NooMd_9iFKTA2OalZwdoUlE5f00TFc5MYeK5cFA8hMF3cnuj3\"}"} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fffed287-894d-4580-941b-ea03de3706c1","keyName":"e2e-rate-a-ac54f7","subscription":"e2e-rate-iso-a-ac54f7","tenant":"e2e-shared-a-0874ce","userId":"fffed287-894d-4580-941b-ea03de3706c1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\",\"requestedSubscription\":\"e2e-rate-iso-a-ac54f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac54f7","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac54f7"} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fffed287-894d-4580-941b-ea03de3706c1","keyName":"e2e-rate-a-ac54f7","selected_subscription":"e2e-rate-iso-a-ac54f7","selected_subscription_key":"ai-tenant-e2e-shared-a-0874ce/e2e-rate-iso-a-ac54f7@ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac54f7","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a4a9551-27ef-4e55-927a-b623d1402d00","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50718","PortSpecifier":{"PortValue":50718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e679123-c0fe-44a9-8b69-fc66764249aa","method":"POST","path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50718","PortSpecifier":{"PortValue":50718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358105,"nanos":61041372},"http":{"id":"3e679123-c0fe-44a9-8b69-fc66764249aa","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y1M1GEIhJo6NooMd_9iFKTA2OalZwdoUlE5f00TFc5MYeK5cFA8hMF3cnuj3"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y1M1GEIhJo6NooMd_9iFKTA2OalZwdoUlE5f00TFc5MYeK5cFA8hMF3cnuj3\"}"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fffed287-894d-4580-941b-ea03de3706c1","keyName":"e2e-rate-a-ac54f7","subscription":"e2e-rate-iso-a-ac54f7","tenant":"e2e-shared-a-0874ce","userId":"fffed287-894d-4580-941b-ea03de3706c1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\",\"requestedSubscription\":\"e2e-rate-iso-a-ac54f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac54f7","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac54f7"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fffed287-894d-4580-941b-ea03de3706c1","keyName":"e2e-rate-a-ac54f7","selected_subscription":"e2e-rate-iso-a-ac54f7","selected_subscription_key":"ai-tenant-e2e-shared-a-0874ce/e2e-rate-iso-a-ac54f7@ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac54f7","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e679123-c0fe-44a9-8b69-fc66764249aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48172d70-ed35-4307-b744-066cc720f22a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:48084","PortSpecifier":{"PortValue":48084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48172d70-ed35-4307-b744-066cc720f22a","method":"POST","path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48172d70-ed35-4307-b744-066cc720f22a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:48084","PortSpecifier":{"PortValue":48084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358106,"nanos":103670007},"http":{"id":"48172d70-ed35-4307-b744-066cc720f22a","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Y1M1GEIhJo6NooMd_9iFKTA2OalZwdoUlE5f00TFc5MYeK5cFA8hMF3cnuj3"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Y1M1GEIhJo6NooMd_9iFKTA2OalZwdoUlE5f00TFc5MYeK5cFA8hMF3cnuj3\"}"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fffed287-894d-4580-941b-ea03de3706c1","keyName":"e2e-rate-a-ac54f7","subscription":"e2e-rate-iso-a-ac54f7","tenant":"e2e-shared-a-0874ce","userId":"fffed287-894d-4580-941b-ea03de3706c1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\",\"requestedSubscription\":\"e2e-rate-iso-a-ac54f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac54f7","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48172d70-ed35-4307-b744-066cc720f22a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac54f7"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48172d70-ed35-4307-b744-066cc720f22a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fffed287-894d-4580-941b-ea03de3706c1","keyName":"e2e-rate-a-ac54f7","selected_subscription":"e2e-rate-iso-a-ac54f7","selected_subscription_key":"ai-tenant-e2e-shared-a-0874ce/e2e-rate-iso-a-ac54f7@ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac54f7","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48172d70-ed35-4307-b744-066cc720f22a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48172d70-ed35-4307-b744-066cc720f22a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59906","PortSpecifier":{"PortValue":59906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c919986d-3cbf-4765-b4ff-4e080428ac05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59906","PortSpecifier":{"PortValue":59906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358116,"nanos":990798408},"http":{"id":"c919986d-3cbf-4765-b4ff-4e080428ac05","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c919986d-3cbf-4765-b4ff-4e080428ac05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46884","PortSpecifier":{"PortValue":46884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46884","PortSpecifier":{"PortValue":46884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358117,"nanos":34271425},"http":{"id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"]}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a3dcb02bb854"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6874bb89-29bb-4316-9827-d1d257e7e51c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3500acee-388c-46b1-8f2e-4cbc9fc9fb4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2470584-06f9-49a2-a69f-e9965ef7f8c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59920","PortSpecifier":{"PortValue":59920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","method":"POST","path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59920","PortSpecifier":{"PortValue":59920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358117,"nanos":81574435},"http":{"id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TK2sDGWDEsRmjUiE_ogdbITCV8aMS8xI1yseQRZvExQGXmF47ZBOJZchDWld"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TK2sDGWDEsRmjUiE_ogdbITCV8aMS8xI1yseQRZvExQGXmF47ZBOJZchDWld\"}"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7839f3ab-3338-421c-af7c-1fd0658be512","keyName":"e2e-rate-a-b59965","subscription":"e2e-rate-iso-a-b59965","tenant":"e2e-shared-a-0874ce","userId":"7839f3ab-3338-421c-af7c-1fd0658be512","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\",\"requestedSubscription\":\"e2e-rate-iso-a-b59965\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b59965","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b59965"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7839f3ab-3338-421c-af7c-1fd0658be512","keyName":"e2e-rate-a-b59965","selected_subscription":"e2e-rate-iso-a-b59965","selected_subscription_key":"ai-tenant-e2e-shared-a-0874ce/e2e-rate-iso-a-b59965@ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b59965","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b96acd1f-5cb2-4ca6-a6c0-51a77ffb1521","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59922","PortSpecifier":{"PortValue":59922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","method":"POST","path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59922","PortSpecifier":{"PortValue":59922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358118,"nanos":121765866},"http":{"id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TK2sDGWDEsRmjUiE_ogdbITCV8aMS8xI1yseQRZvExQGXmF47ZBOJZchDWld"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TK2sDGWDEsRmjUiE_ogdbITCV8aMS8xI1yseQRZvExQGXmF47ZBOJZchDWld\"}"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7839f3ab-3338-421c-af7c-1fd0658be512","keyName":"e2e-rate-a-b59965","subscription":"e2e-rate-iso-a-b59965","tenant":"e2e-shared-a-0874ce","userId":"7839f3ab-3338-421c-af7c-1fd0658be512","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\",\"requestedSubscription\":\"e2e-rate-iso-a-b59965\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b59965","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b59965"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7839f3ab-3338-421c-af7c-1fd0658be512","keyName":"e2e-rate-a-b59965","selected_subscription":"e2e-rate-iso-a-b59965","selected_subscription_key":"ai-tenant-e2e-shared-a-0874ce/e2e-rate-iso-a-b59965@ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b59965","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c34142-2087-4085-ad96-e6d53dcb2cad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59926","PortSpecifier":{"PortValue":59926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","method":"POST","path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions","host":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:59926","PortSpecifier":{"PortValue":59926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358119,"nanos":163571394},"http":{"id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","method":"POST","headers":{":authority":"e2e-shared-a-0874ce.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TK2sDGWDEsRmjUiE_ogdbITCV8aMS8xI1yseQRZvExQGXmF47ZBOJZchDWld"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TK2sDGWDEsRmjUiE_ogdbITCV8aMS8xI1yseQRZvExQGXmF47ZBOJZchDWld\"}"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7839f3ab-3338-421c-af7c-1fd0658be512","keyName":"e2e-rate-a-b59965","subscription":"e2e-rate-iso-a-b59965","tenant":"e2e-shared-a-0874ce","userId":"7839f3ab-3338-421c-af7c-1fd0658be512","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\",\"requestedSubscription\":\"e2e-rate-iso-a-b59965\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0874ce.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b59965","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b59965"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7839f3ab-3338-421c-af7c-1fd0658be512","keyName":"e2e-rate-a-b59965","selected_subscription":"e2e-rate-iso-a-b59965","selected_subscription_key":"ai-tenant-e2e-shared-a-0874ce/e2e-rate-iso-a-b59965@ai-tenant-e2e-shared-a-0874ce/rate-test-model-0874ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0874ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b59965","namespace":"ai-tenant-e2e-shared-a-0874ce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2f5f513-1e61-4f2f-b324-49c5393c680c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46900","PortSpecifier":{"PortValue":46900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c22aa635-32b9-48ae-b302-a76f4963cd96","method":"POST","path":"/ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6/v1/completions","host":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:46900","PortSpecifier":{"PortValue":46900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358119,"nanos":202987175},"http":{"id":"c22aa635-32b9-48ae-b302-a76f4963cd96","method":"POST","headers":{":authority":"e2e-shared-b-d073f6.apps.a2047f3c-6a02-4c32-a628-a3dcb02bb854.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-162GnMqJp5gSc24Mu_aDlVO95fqGqmtrybzG4ZCIrzibdXo694clOPp3CsjV2"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-162GnMqJp5gSc24Mu_aDlVO95fqGqmtrybzG4ZCIrzibdXo694clOPp3CsjV2\"}"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eaf1e12e-993f-497c-b62b-b99f8bc7abc8","keyName":"e2e-rate-b-b59965","subscription":"e2e-rate-iso-b-b59965","tenant":"e2e-shared-b-d073f6","userId":"eaf1e12e-993f-497c-b62b-b99f8bc7abc8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6\",\"requestedSubscription\":\"e2e-rate-iso-b-b59965\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d073f6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d073f6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b59965","namespace":"ai-tenant-e2e-shared-b-d073f6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b59965"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eaf1e12e-993f-497c-b62b-b99f8bc7abc8","keyName":"e2e-rate-b-b59965","selected_subscription":"e2e-rate-iso-b-b59965","selected_subscription_key":"ai-tenant-e2e-shared-b-d073f6/e2e-rate-iso-b-b59965@ai-tenant-e2e-shared-b-d073f6/rate-test-model-d073f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d073f6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b59965","namespace":"ai-tenant-e2e-shared-b-d073f6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:15:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c22aa635-32b9-48ae-b302-a76f4963cd96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d41f24ab0d74874474afd549c4ef1cbfdcc9d793b6a726f6bb6a9d218f8928e"} {"level":"info","ts":"2026-07-06T17:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83c859c0382e6436a723f26e370b086f2b4235c740f7b588209b09ca64ad7cda"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5472a11dc65d6e3af659a7dad6851c0139ef21b2eabf41a6eb80bbc9f6c21248"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7416c81d96bca1a1e6c39d86401e513b18e00395138355c207268bf57b0b62b6"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9edc0f5f5d0287a7ec300692a1f8dd452ad74d73cfb35fb012f69e742bf2ac23"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8066a2adc00b858fb83bc003f5105029d35010573890d40b67007d4837a141c"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b192f3071f0ca0f98fc9ff10b741ea4feb260395775ded8fbbc7c25d341104ac"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eacc2fa6adcc62895a889baf97806c5348a3e70a7d510bc3ccb24fda99e9d7"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f621957a227f4a1576c4332fcee6cd25ca8d183b963efb659c5a3efc6e97a7b3"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1343781f603c0e422923c518e07d1f8e0117f0ddfc674a3026e737ab9b392d4e"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f9a3669ef96181c459c02915e6239430b7bda1d19d7229015fa2ccccd34a70"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d69fd1a5193773f1a3ddd7dff81d9844c3b8930aa056c68282fd11fd7390977"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4593c019bcf0dec8cd4cd38af11077df107d17daa1a10907165ed118ee4f79dc"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a55868010fe2a9891e94253a3430074f6398248893e27eb40c370fec7b69d44"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5817244c24a1f353c70bb90add347159f93573041e8cc304a5e9d932d3682011"} {"level":"info","ts":"2026-07-06T17:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a7e2eabd818c2c795905f013d261ab731aa524de0acbb2f25d42ae0dbd12b85"} {"level":"info","ts":"2026-07-06T17:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a313c1d157898ca12b58fbf49a57945bbee70f6b6b3458a0e5b09a9443541866"} {"level":"info","ts":"2026-07-06T17:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f021ccede8fd225fbdd006775d4cc2918751be7b38d3c3f96d3b92666c1d3fa"} {"level":"info","ts":"2026-07-06T17:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c406af04270149f0df55a7784c087f0b039db15a74a0b4bc7511f4c6bac0d81"} {"level":"info","ts":"2026-07-06T17:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/408694bfd0d2ec246c61a3a1a509bb4d94f4050e5b89e4a169030c9b50f94d69"}